ID CVE-2021-45337
Summary Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elevated privileges by "hollowing" process wsc_proxy.exe which could lead to acquire antimalware (AM-PPL) protection.
References
Vulnerable Configurations
  • cpe:2.3:a:avast:antivirus:8.0.1489:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:8.0.1489:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:8.0.1497:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:8.0.1497:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:8.0.1500:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:8.0.1500:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:8.0.1501:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:8.0.1501:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:8.0.1504:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:8.0.1504:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:8.0.1506:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:8.0.1506:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:12.1.2272:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:12.1.2272:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:12.2.2276:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:12.2.2276:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:12.3.2279:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:12.3.2279:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.1.2286:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.1.2286:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.2.2288:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.2.2288:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.3.2290:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.3.2290:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.3.2291:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.3.2291:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.4.2294:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.4.2294:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.5.2302:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.5.2302:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.6.2310:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.6.2310:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.7.2314:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.7.2314:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.8.2318:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.8.2318:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:17.9.2322:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:17.9.2322:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.1.2326:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.1.2326:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.2.2328:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.2.2328:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.3.2333:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.3.2333:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.4.2338:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.4.2338:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.5.2342:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.5.2342:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.6.2349:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.6.2349:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.7.2354:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.7.2354:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:18.8.2356:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:18.8.2356:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.1:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.3.2369:*:*:*:free:*:*:*
    cpe:2.3:a:avast:antivirus:19.3.2369:*:*:*:free:*:*:*
  • cpe:2.3:a:avast:antivirus:19.3.2369:*:*:*:internet_security:*:*:*
    cpe:2.3:a:avast:antivirus:19.3.2369:*:*:*:internet_security:*:*:*
  • cpe:2.3:a:avast:antivirus:19.3.2369:*:*:*:premiere:*:*:*
    cpe:2.3:a:avast:antivirus:19.3.2369:*:*:*:premiere:*:*:*
  • cpe:2.3:a:avast:antivirus:19.4:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.4:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.4.2374:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.4.2374:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.5.2378:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.5.2378:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.6.2383:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.6.2383:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.7.2388:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.7.2388:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.8:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.8:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:19.8.2393:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:19.8.2393:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:20.0:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:20.0:*:*:*:*:*:*:*
  • cpe:2.3:a:avast:antivirus:20.1.5069.562:*:*:*:*:*:*:*
    cpe:2.3:a:avast:antivirus:20.1.5069.562:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 12-07-2022 - 17:42)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
Last major update 12-07-2022 - 17:42
Published 27-12-2021 - 14:15
Last modified 12-07-2022 - 17:42
Back to Top