Avast Antivirus Multiple RPC Vulnerabilities Analysis (CVE-2020-10860 to 10868)

Multiple Avast Antivirus (RPC Service) Vulnerabilities Disclosed Test Environment Operating System: Windows 7 Ultimate 32-bit (6.1, Build 7601), Windows 10 Pro 32-bit (10, Build 18363) Virtual Machine Type: VirtualBox Vulnerability Details The following lists multiple CVEs along with their corresponding vulnerability descriptions: CVE-2020-10860: Arbitrary memory address overwrite vulnerability in Avast Log Library. Present in Avast Antivirus versions prior to 20, potentially leading to denial of service (DoS) in the Avast service (AvastSvc.exe). CVE-2020-10861: Arbitrary file deletion via RPC. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library allows attackers to delete files from the Avast program path via RPC when Self Defense is enabled. CVE-2020-10862: Local Privilege Escalation (LPE) via RPC. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library enables attackers to perform privilege escalation via RPC. CVE-2020-10863: Scheduled shutdown execution via RPC. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library allows attackers to trigger a shutdown via TempShutDownMachine from a low-integrity process. CVE-2020-10864: Restart execution via RPC. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library allows attackers to trigger a restart from a low-integrity process. CVE-2020-10865: Arbitrary read/write of Stats.ini file. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library enables attackers to arbitrarily modify the Components section of the Stats.ini file via RPC from a low-integrity process. CVE-2020-10866: Enumeration of network interfaces and access points. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library allows attackers to enumerate network interfaces and access points via RPC from a low-integrity process. CVE-2020-10867: Unauthorized operations (tasks) execution from untrusted processes. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library allows attackers to bypass intended access restrictions for tasks when Self Defense is enabled. CVE-2020-10868: Launching repair application via RPC. In Avast Antivirus versions prior to 20, exploitation of the aswTask RPC endpoint in the TaskEx library allows attackers to initiate a repair application call from a low-integrity process. Demonstration and Screenshots Screenshots and video links are provided for Free Avast Antivirus, Premium Avast Antivirus, and scenarios where Self Defense protection is disabled, demonstrating the exploitation and effects of the vulnerabilities. Acknowledgements, References, and Contact Information Acknowledges the discoverer Umar Farook, providing email, YouTube channel, and website links for further information and updates. Also includes References with links to Avast version release notes and detailed descriptions/analysis reports for the related vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Avast Antivirus Multiple RPC Vulnerabilities Analysis (CVE-2020-10860 to 10868)

More from this source