NVD

Id
32808  
Name
CVE-2014-4936  
Description
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE) consumer 1.04.1.1012 and earlier allow man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-12-16  
Modified Date
2016-12-06  
Seq
2014-4936  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172370 32808 CVE-2014-4936 http://blog.0x3a.com/post/104954032239/cve-2014-4936-malwarebytes-anti-malware-and  View
172371 32808 CVE-2014-4936 http://packetstormsecurity.com/files/130244/Malwarebytes-Anti-Malware-Anti-Exploit-Update-Remote-Code-Execution.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18378 JVNDB-2014-007253 Malwarebytes Anti-Malware および Malwarebytes Anti-Exploit のアップグレード機能における任意のコードを実行される脆弱性 Malwarebytes Anti-Malware (MBAM) および Malwarebytes Anti-Exploit (MBAE) のアップグレード機能には、任意のコードを実行される脆弱性が存在します。 CVE-2014-4936 72225 CVE-2014-4936 32808 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007253.html 2014-12-11 2014-12-19 View