mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-09-17 18:45:49 +00:00
334 lines
13 KiB
JSON
334 lines
13 KiB
JSON
{
|
|
"id": "CVE-2016-4025",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2016-11-03T10:59:02.557",
|
|
"lastModified": "2024-11-21T02:51:11.270",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x y Email Server Security v8.x.x permiten a atacantes eludir la funcionalidad DeepScreen a trav\u00e9s de una llamada DeviceIoControll."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV30": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.0",
|
|
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
|
|
"baseScore": 5.5,
|
|
"baseSeverity": "MEDIUM",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "LOW",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "NONE"
|
|
},
|
|
"exploitabilityScore": 1.8,
|
|
"impactScore": 3.6
|
|
}
|
|
],
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
|
|
"baseScore": 2.1,
|
|
"accessVector": "LOCAL",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "NONE"
|
|
},
|
|
"baseSeverity": "LOW",
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 2.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-254"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:business_security:11.1.2241:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CD7F8F8F-B719-4507-9AED-FFB2C6548966"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:business_security:11.1.2245:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "74137F72-BE60-40CE-8DDA-A3A537EE7F7F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:business_security:11.1.2253:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "28A89E27-EE44-42ED-947C-6CAAAF47DC3E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:business_security:11.1.2260:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3E684724-98FC-4383-A8E0-7ADA9DFB63C4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:business_security:11.1.2261:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "42B26560-F8DB-4DDA-B3CF-30AFE90C22C6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:business_security:11.1.2262:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AAB67D3F-9824-4176-B59B-E2BD28EC4C3F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2241:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "62607F64-4AA3-4286-8ACC-AF1AC98C9C31"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2245:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0FDB3978-FF4A-49F6-84D2-323B8D92F3C5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2253:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3B3B5423-632F-4B1E-894E-746976D0BE4B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2260:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C682E3D5-9051-490A-B091-7A7580970B86"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2261:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7B408F0F-31F0-4D14-BC9D-B97568F86A09"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:free_antivirus:11.1.2262:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CD2591E4-E203-4C17-B1F1-C1F61C5B3E3B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2241:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "941EADBE-7A31-4281-8D8E-9CF39D919865"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2245:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D0FFCEEA-55DC-4640-BA0F-8B1D44FD5017"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2253:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3EF50776-252D-44D4-B87B-4CEDBF533A61"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2260:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6BB93D9E-98A1-4F3A-8796-9C2A4791B019"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2261:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "962B6E6C-1808-450D-921F-6B89FABBE71F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:internet_security:11.1.2262:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EAE5C6E1-4F99-4B33-BBE3-D8E5B536AF51"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:premier:11.1.2241:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "51C30573-F046-4FA7-87CB-355C848249A5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:premier:11.1.2245:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "45045184-5F6D-4878-B6A4-D3049FB73FB4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:premier:11.1.2253:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DA713EB7-F992-43AD-B59C-B237CB584BC8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:premier:11.1.2260:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7D1EB05A-EC69-4DAB-8514-DC0CEC62D594"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:premier:11.1.2261:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FC05DA03-8761-4514-AD24-840E247B71B5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:premier:11.1.2262:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D1B25F32-1927-48D2-9211-97CD6C0CF648"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2241:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CA634DA9-F172-44A0-97B8-0813116FE7F0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2245:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "17DCA49C-BFBD-43BC-925A-3100AA4FC6FE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2253:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "30B89F5F-E2D6-40E3-8AAB-E8A3AECFC0FA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2260:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A7FCC052-752E-4209-BD20-8B7FDEE8EB93"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2261:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F400F9A3-27A3-439B-BC71-BF3E309CB3B7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:pro_antivirus:11.1.2262:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0519F925-5B4E-48BD-9D0D-BDA59773F107"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:email_server_security:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "8.0.1609",
|
|
"matchCriteriaId": "A6E4BEE8-8F3E-48BA-ABB5-BD973988A65B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:email_server_security:8.0.1606:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BCE04B0A-4555-4745-A1DA-BC1C0697A9F8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "8.0.1609",
|
|
"matchCriteriaId": "0C0A3804-C553-4C1F-8829-9BE203C846E6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection:8.0.1606:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3286C3D1-22CA-4AE6-B928-4E3641DE9444"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection_plus:8.0.1606:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7A4FE625-9737-481F-B4D6-F5CD2E59BD5E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection_plus:8.0.1609:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C821158E-F617-450E-932E-9443CF4214B5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "8.0.1609",
|
|
"matchCriteriaId": "FA6FA8F9-E4B7-4BD6-8E06-A149621258A1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite:8.0.1606:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1EB1F2FD-F5EA-47C3-AD62-8E75910B1262"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite_plus:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "8.0.1609",
|
|
"matchCriteriaId": "8D56E3AA-DCA8-4ED8-8FA4-AF22EFD53E25"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:endpoint_protection_suite_plus:8.0.1606:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "48365E94-3477-4662-951F-2E8A0B878BED"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:file_server_security:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "8.0.1609",
|
|
"matchCriteriaId": "C4DC12C0-E975-4081-9727-C0A2C7697228"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:avast:file_server_security:8.0.1606:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A134B646-A38A-4B78-AEAE-EB635BFC3501"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Technical Description",
|
|
"Third Party Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025/",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Technical Description",
|
|
"Third Party Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |