Published: 03/06/2019 Updated: 06/10/2020

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

This vulnerability allows remote malicious users to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handles URIs within certain schemes. The product does not warn the user that a dangerous navigation is about to take place. Because special characters in the URI are not sanitized, this could lead to the execution of arbitrary commands. An attacker can leverage this vulnerability to execute code in the context of the current user at medium integrity. Was ZDI-CAN-7162.

Vulnerable Product	Search on Vulmon	Subscribe to Product
malwarebytes antimalware 3.6.1.2711

EA Origin versions prior to 10538 suffer from a remote code execution vulnerability ...

CWE-77 https://www.zerodayinitiative.com/advisories/ZDI-19-223/https://nvd.nist.gov https://packetstormsecurity.com/files/153385/EA-Origin-Remote-Code-Execution.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-6739

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect