CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Improper Privilege Management
Summary: in avast antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as trusted from the perspective of the avast product. this bypasses the self-defense feature of the product, opening a door to subsequent attack on many of its components.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2017-04-27
Last Modified Date: 2019-10-03