Dynamic Malware Analysis Evasion in Tencent Habo
CVE-2019-13125

7.8HIGH

Key Information:

Vendor

Tencent

Status
Habomalhunter
Vendor
CVE Published:
1 July 2019

What is CVE-2019-13125?

The vulnerability in Tencent Habo through version 2.0.0.3 allows attackers to escape detection during dynamic malware analysis. This is accomplished via Position Independent Executable (PIE) compilation, making it challenging for security tools to identify and analyze malicious code effectively. Consequently, this undermines the overall security posture and increases risk, as malware can operate without being detected by standard analysis techniques.

References

https://github.com/Tencent/HaboMalHunter/issues/23
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-13125 : Dynamic Malware Analysis Evasion in Tencent Habo