Vulnerability Description
A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting feature (exclusions.dat under %SYSTEMDRIVE%\ProgramData) to permit execution of unauthorized applications including malware and malicious websites. Files blacklisted by Malwarebytes Malware Protect can be executed, and domains blacklisted by Malwarebytes Web Protect can be reached through HTTP.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Malwarebytes | Malwarebytes Anti-Malware | 2.2.1 |
Related Weaknesses (CWE)
References
- http://www.securitytube.net/video/16690Third Party Advisory
- https://forums.malwarebytes.com/topic/158251-malwarebytes-hall-of-fame/Vendor Advisory
- https://github.com/mspaling/mbam-exclusions-poc-ExploitThird Party Advisory
- https://github.com/mspaling/mbam-exclusions-poc-/blob/master/mbam-whitelist-poc.ExploitThird Party Advisory
- https://www.youtube.com/watch?v=LF5ic5nOoUYThird Party Advisory
- http://www.securitytube.net/video/16690Third Party Advisory
- https://forums.malwarebytes.com/topic/158251-malwarebytes-hall-of-fame/Vendor Advisory
- https://github.com/mspaling/mbam-exclusions-poc-ExploitThird Party Advisory
- https://github.com/mspaling/mbam-exclusions-poc-/blob/master/mbam-whitelist-poc.ExploitThird Party Advisory
- https://www.youtube.com/watch?v=LF5ic5nOoUYThird Party Advisory
FAQ
What is CVE-2016-10717?
CVE-2016-10717 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting fe...
How severe is CVE-2016-10717?
CVE-2016-10717 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-10717?
Check the references section above for vendor advisories and patch information. Affected products include: Malwarebytes Malwarebytes Anti-Malware.