RSS   Vulnerabilities for 'Malwarebytes anti-malware'   RSS

2018-03-21
 
CVE-2016-10717

CWE-254
 
 
A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting feature (exclusions.dat under %SYSTEMDRIVE%\ProgramData) to permit execution of unauthorized applications including malware and malicious websites. Files blacklisted by Malwarebytes Malware Protect can be executed, and domains blacklisted by Malwarebytes Web Protect can be reached through HTTP.

 
2014-12-16
 
CVE-2014-4936

 
 
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable.

 

 >>> Vendor: Malwarebytes 6 Products
Endpoint protection
Malwarebytes anti-exploit
Malwarebytes anti-malware
Malwarebytes
Antimalware
Adwcleaner

Copyright 2024, cxsecurity.com

 

Back to Top