The main Avast antivirus service contained a custom JavaScript interpreter, enabling wormable pre-auth RCEs. Avast has now disabled the emulator in response to a vulnerability report

Deimos
2020-03-11T19:36:22Z

Link URL: https://github.com/taviso/avscript

Comments URL: https://tildes.net/~comp/mla/the_main_avast_antivirus_service_contained_a_custom_javascript_interpreter_enabling_wormable_pre

Votes: 13

Comments: 6