CVE-2020-10868 : Security Advisory and Response

An issue was discovered in Avast Antivirus before version 20, allowing attackers to launch a Repair App RPC call from a Low Integrity process.

Understanding CVE-2020-10868

What is CVE-2020-10868?

The vulnerability exists in the Avast Antivirus software, specifically in the aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe).

The Impact of CVE-2020-10868

This vulnerability enables attackers to execute the Repair App RPC call from a Low Integrity process, potentially leading to unauthorized access and malicious activities.

Technical Details of CVE-2020-10868

Vulnerability Description

The issue lies in the Avast Antivirus software, allowing attackers to exploit the Repair App RPC call from a Low Integrity process.

Affected Systems and Versions

Product: Avast Antivirus
Versions affected: Before version 20

Exploitation Mechanism

Attackers can leverage the vulnerability to execute the Repair App RPC call from a Low Integrity process, compromising system security.

Mitigation and Prevention

Immediate Steps to Take

Update Avast Antivirus to version 20 or newer to mitigate the vulnerability.
Monitor system activity for any suspicious behavior.

Long-Term Security Practices

Regularly update antivirus software and all system components.
Implement least privilege access to limit the impact of potential security breaches.
Conduct security audits and penetration testing to identify and address vulnerabilities.

Patching and Updates

Ensure timely installation of security patches and updates to protect systems from known vulnerabilities.