CVE-2016-10717: High severity malwarebytes anti-malware vulnerability
A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting feature (exclusions.dat under %SYSTEMDRIVE%\ProgramData) to permit execution of unauthorized applications including malware and malicious websites. Files blacklisted by Malwarebytes Malware Protect can be executed, and domains blacklisted by Malwarebytes Web Protect can be reached through HTTP.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10717?
CVE-2016-10717 is classified as a moderate severity vulnerability due to its impact on the whitelisting feature in Malwarebytes Anti-Malware.
How do I fix CVE-2016-10717?
To fix CVE-2016-10717, update Malwarebytes Anti-Malware to version 3.0.4 or later.
What products are affected by CVE-2016-10717?
CVE-2016-10717 affects Malwarebytes Anti-Malware consumer version 2.2.1 and earlier.
What type of attack may exploit CVE-2016-10717?
An attacker may exploit CVE-2016-10717 to gain control over the exclusions.dat file and execute unauthorized applications.
When was CVE-2016-10717 disclosed?
CVE-2016-10717 was disclosed in 2016.