CVE-2020-11507

EUVD-2020-3860 · Published Apr 6, 2020

An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded.

Technologies

Malwarebytes Adwcleaner

Weaknesses

CWE-426

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Execution Privilege Escalation Stealth

T1068Exploitation for Privilege Escalation T1574.007Path Interception by PATH Environment Variable T1574.009Path Interception by Unquoted Path

References

https://forums.malwarebytes.com/topic/258140-release-adwcleaner-804/

Potentially impacted assets

See if this affects your attack surface