CVE-2016-3986
published 2016-04-12CVE-2016-3986: Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to…
PriorityP343high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EXPLOIT
EPSS
7.88%
94.0th percentile
Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing.
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/136090/Avast-Authenticode-Parsing-Memory-Corruption.htmlhttps://code.google.com/p/google-security-research/issues/detail?id=668https://www.exploit-db.com/exploits/39530/http://packetstormsecurity.com/files/136090/Avast-Authenticode-Parsing-Memory-Corruption.htmlhttps://code.google.com/p/google-security-research/issues/detail?id=668https://www.exploit-db.com/exploits/39530/
2016-04-12
Published