Unscored severity · published Dec 16, 2014
CVE-2014-4936
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle…
–
CVSS
16.8%
EPSS
No
On KEV
Description
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Malwarebytes Anti-exploit · Malwarebytes
through 1.04.1.1012 · source: NVD
MA
Malwarebytes Anti-malware · Malwarebytes
through 2.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4936
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4936
Exploit
http://blog.0x3a.com/post/104954032239/cve-2014-4936-malwarebytes-anti-malware-and
packetstormsecurity.com
http://packetstormsecurity.com/files/130244/Malwarebytes-Anti-Malware-Anti-Exploit-Update-Remote-Code-Execution.html
More from Malwarebytes Anti-exploit
–
CVE-2014-100039
mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an…