2024-12-08 03:06:42 +00:00

334 lines
13 KiB
JSON

{
"id": "CVE-2016-4025",
"sourceIdentifier": "cve@mitre.org",
"published": "2016-11-03T10:59:02.557",
"lastModified": "2024-11-21T02:51:11.270",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call."
},
{
"lang": "es",
"value": "Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x y Email Server Security v8.x.x permiten a atacantes eludir la funcionalidad DeepScreen a trav\u00e9s de una llamada DeviceIoControll."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"baseScore": 2.1,
"accessVector": "LOCAL",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "LOW",
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-254"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:business_security:11.1.2241:*:*:*:*:*:*:*",
"matchCriteriaId": "CD7F8F8F-B719-4507-9AED-FFB2C6548966"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:business_security:11.1.2245:*:*:*:*:*:*:*",
"matchCriteriaId": "74137F72-BE60-40CE-8DDA-A3A537EE7F7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:business_security:11.1.2253:*:*:*:*:*:*:*",
"matchCriteriaId": "28A89E27-EE44-42ED-947C-6CAAAF47DC3E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:business_security:11.1.2260:*:*:*:*:*:*:*",
"matchCriteriaId": "3E684724-98FC-4383-A8E0-7ADA9DFB63C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:business_security:11.1.2261:*:*:*:*:*:*:*",
"matchCriteriaId": "42B26560-F8DB-4DDA-B3CF-30AFE90C22C6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:business_security:11.1.2262:*:*:*:*:*:*:*",
"matchCriteriaId": "AAB67D3F-9824-4176-B59B-E2BD28EC4C3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2241:*:*:*:*:*:*:*",
"matchCriteriaId": "62607F64-4AA3-4286-8ACC-AF1AC98C9C31"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2245:*:*:*:*:*:*:*",
"matchCriteriaId": "0FDB3978-FF4A-49F6-84D2-323B8D92F3C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2253:*:*:*:*:*:*:*",
"matchCriteriaId": "3B3B5423-632F-4B1E-894E-746976D0BE4B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2260:*:*:*:*:*:*:*",
"matchCriteriaId": "C682E3D5-9051-490A-B091-7A7580970B86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2261:*:*:*:*:*:*:*",
"matchCriteriaId": "7B408F0F-31F0-4D14-BC9D-B97568F86A09"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2262:*:*:*:*:*:*:*",
"matchCriteriaId": "CD2591E4-E203-4C17-B1F1-C1F61C5B3E3B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2241:*:*:*:*:*:*:*",
"matchCriteriaId": "941EADBE-7A31-4281-8D8E-9CF39D919865"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2245:*:*:*:*:*:*:*",
"matchCriteriaId": "D0FFCEEA-55DC-4640-BA0F-8B1D44FD5017"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2253:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF50776-252D-44D4-B87B-4CEDBF533A61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2260:*:*:*:*:*:*:*",
"matchCriteriaId": "6BB93D9E-98A1-4F3A-8796-9C2A4791B019"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2261:*:*:*:*:*:*:*",
"matchCriteriaId": "962B6E6C-1808-450D-921F-6B89FABBE71F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2262:*:*:*:*:*:*:*",
"matchCriteriaId": "EAE5C6E1-4F99-4B33-BBE3-D8E5B536AF51"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:premier:11.1.2241:*:*:*:*:*:*:*",
"matchCriteriaId": "51C30573-F046-4FA7-87CB-355C848249A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:premier:11.1.2245:*:*:*:*:*:*:*",
"matchCriteriaId": "45045184-5F6D-4878-B6A4-D3049FB73FB4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:premier:11.1.2253:*:*:*:*:*:*:*",
"matchCriteriaId": "DA713EB7-F992-43AD-B59C-B237CB584BC8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:premier:11.1.2260:*:*:*:*:*:*:*",
"matchCriteriaId": "7D1EB05A-EC69-4DAB-8514-DC0CEC62D594"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:premier:11.1.2261:*:*:*:*:*:*:*",
"matchCriteriaId": "FC05DA03-8761-4514-AD24-840E247B71B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:premier:11.1.2262:*:*:*:*:*:*:*",
"matchCriteriaId": "D1B25F32-1927-48D2-9211-97CD6C0CF648"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2241:*:*:*:*:*:*:*",
"matchCriteriaId": "CA634DA9-F172-44A0-97B8-0813116FE7F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2245:*:*:*:*:*:*:*",
"matchCriteriaId": "17DCA49C-BFBD-43BC-925A-3100AA4FC6FE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2253:*:*:*:*:*:*:*",
"matchCriteriaId": "30B89F5F-E2D6-40E3-8AAB-E8A3AECFC0FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2260:*:*:*:*:*:*:*",
"matchCriteriaId": "A7FCC052-752E-4209-BD20-8B7FDEE8EB93"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2261:*:*:*:*:*:*:*",
"matchCriteriaId": "F400F9A3-27A3-439B-BC71-BF3E309CB3B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2262:*:*:*:*:*:*:*",
"matchCriteriaId": "0519F925-5B4E-48BD-9D0D-BDA59773F107"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:email_server_security:*:*:*:*:*:*:*:*",
"versionEndIncluding": "8.0.1609",
"matchCriteriaId": "A6E4BEE8-8F3E-48BA-ABB5-BD973988A65B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:email_server_security:8.0.1606:*:*:*:*:*:*:*",
"matchCriteriaId": "BCE04B0A-4555-4745-A1DA-BC1C0697A9F8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection:*:*:*:*:*:*:*:*",
"versionEndIncluding": "8.0.1609",
"matchCriteriaId": "0C0A3804-C553-4C1F-8829-9BE203C846E6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection:8.0.1606:*:*:*:*:*:*:*",
"matchCriteriaId": "3286C3D1-22CA-4AE6-B928-4E3641DE9444"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection_plus:8.0.1606:*:*:*:*:*:*:*",
"matchCriteriaId": "7A4FE625-9737-481F-B4D6-F5CD2E59BD5E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection_plus:8.0.1609:*:*:*:*:*:*:*",
"matchCriteriaId": "C821158E-F617-450E-932E-9443CF4214B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite:*:*:*:*:*:*:*:*",
"versionEndIncluding": "8.0.1609",
"matchCriteriaId": "FA6FA8F9-E4B7-4BD6-8E06-A149621258A1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite:8.0.1606:*:*:*:*:*:*:*",
"matchCriteriaId": "1EB1F2FD-F5EA-47C3-AD62-8E75910B1262"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite_plus:*:*:*:*:*:*:*:*",
"versionEndIncluding": "8.0.1609",
"matchCriteriaId": "8D56E3AA-DCA8-4ED8-8FA4-AF22EFD53E25"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite_plus:8.0.1606:*:*:*:*:*:*:*",
"matchCriteriaId": "48365E94-3477-4662-951F-2E8A0B878BED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:file_server_security:*:*:*:*:*:*:*:*",
"versionEndIncluding": "8.0.1609",
"matchCriteriaId": "C4DC12C0-E975-4081-9727-C0A2C7697228"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:avast:file_server_security:8.0.1606:*:*:*:*:*:*:*",
"matchCriteriaId": "A134B646-A38A-4B78-AEAE-EB635BFC3501"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/",
"source": "cve@mitre.org",
"tags": [
"Technical Description",
"Third Party Advisory"
]
},
{
"url": "https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Technical Description",
"Third Party Advisory"
]
}
]
}