CVE-2019-19382 Privilege escalation in n/a
Local attackers can escalate privileges by replacing executable files in the insecurely permissioned installation directory of Max Secure Anti Virus Plus.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-19382?
CVE-2019-19382 is a high-severity vulnerability in n/a, published on 3 Dec 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation.
Weakness: CWE-732
Which versions are affected by CVE-2019-19382?
It affects 1 product.
Products include Maxpcsecure Anti Virus Plus.
How do I fix CVE-2019-19382?
No fix has been published for CVE-2019-19382 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-19382 being exploited?
There is no known exploitation of CVE-2019-19382 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2023-1492 Max Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of service
- CVE-2023-1493 Max Secure Anti Virus Plus IoControlCode MaxProctetor64.sys 0x220019 denial of service
- CVE-2023-1490 Max Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access control
- CVE-2023-1491 Max Secure Anti Virus Plus IoControlCode MaxCryptMon.sys 0x220020 access control
Sources
Also known as GHSA-v6xp-4m9g-j2w9.