Remote Code Execution Vulnerability in Malwarebytes Anti-Malware and Anti-Exploit
CVE-2014-4936
Currently unrated
Key Information:
- Vendor
Malwarebytes
- Vendor
- CVE Published:
- 16 December 2014
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 16%
What is CVE-2014-4936?
A vulnerability exists in the upgrade functionality of Malwarebytes Anti-Malware and Anti-Exploit prior to specified versions, which can be exploited by man-in-the-middle attackers. By spoofing the update server, an attacker can upload and execute arbitrary code on a victim’s system, potentially leading to unauthorized control and compromise of sensitive information. Users are urged to update to the latest versions to mitigate this security risk.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.