Detections
Analytics

Malwarebytes Anti-Exploit < 1.05.1.1014 DoS

low Nessus Plugin ID 83958

Language:

Synopsis

The remote host has an anti-exploitation application installed that is affected by a denial of service vulnerability.

Description

The Malwarebytes Anti-Exploit installed on the remote Windows host is a version prior to 1.05.1.1014. It is, therefore, affected by a out-of-bounds read flaw in the 'mbae.sys' driver when handling certain IOCTL calls. A local attacker can exploit this to cause access of invalid memory, resulting in a denial of service

Solution

Upgrade to Malwarebytes Anti-Exploit 1.05.1.1014 or later.

See Also

https://www.malwarebytes.com/support/releasehistory/

Plugin Details

Severity: Low

ID: 83958

File Name: malwarebytes_anti_exploit_1_05_1_1014.nasl

Version: 1.4

Type: local

Agent: windows

Family: Windows

Published: 6/3/2015

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:malwarebytes:malwarebytes_anti-exploit

Required KB Items: installed_sw/Malwarebytes Anti-Exploit

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/1/2014

Vulnerability Publication Date: 12/1/2014

Reference Information

CVE: CVE-2014-100039

BID: 72264