Avast Anti-Virus privileged arbitrary file create on virus restore (CVE-2023-1586)
And today I’m sharing the report describing the vulnerability (CVE-2023-1586) in Avast file restore functionality and exploitation of this vulnerability to ...
Posts by Category
posts
Avast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587)
In this post we’ll talk about how when Avast quarantined your malware you could gain SYSTEM privileges and execute arbitrary code! Technical analysis of the...
Elevation of privileges from Everyone through Avast Sandbox to System AmPPL (CVE-2021-45335, CVE-2021-45336 and CVE-2021-45337)
Today we’ll talk about how by adding AV engine sandbox you can open a new attack path and, as a result, let the attacker through the chain of vulnerabilities...
Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass
In this post I’ll show Avast self-defense bypass: how I discovered a new undocumented way to intercept all system calls without a hypervisor and PatchGuard ...
Discovering and exploiting McAfee COM-objects (CVE-2021-23874)
This post should show an approach to finding COM-object’s bugs with an example CVE-2021-23874. On the other hand, the post can be considered as a real world...