Vulnerability Description
An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process (PPL) and might bypass some of the self-defense mechanisms. This affects all components that use WMI, e.g., AVGSvc.exe 19.6.4546.0 and TuneupSmartScan.dll 19.1.884.0.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Avast | Antivirus | < 19.8 |
| Avg | Anti-Virus | < 19.8 |
Related Weaknesses (CWE)
References
- https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPExploitTechnical DescriptionThird Party Advisory
- https://safebreach.com/blogThird Party Advisory
- https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPExploitTechnical DescriptionThird Party Advisory
- https://safebreach.com/blogThird Party Advisory
FAQ
What is CVE-2019-17093?
CVE-2019-17093 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into ...
How severe is CVE-2019-17093?
CVE-2019-17093 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-17093?
Check the references section above for vendor advisories and patch information. Affected products include: Avast Antivirus, Avg Anti-Virus.