You just need to install the Avast version 2016. Because this protection was not present in Avastium it made it possible for an attacker to build a payload that would enable them to read local files.Īvast have already released a fix for this problem. This flaw is present because Avast had removed a critical security check that will prevent non-Web-related URL schemes from being opened from the command line. It can open an URL in Avastium (Avast Safe Zone Browser), but what is actually worrying is that it would not only open typical website URLs such as or but also local and internal URL’s like file:/// or chrome://. This can easily be exploited by a malicious website that is opened in another browser by forcing the browser to send commands to Of course, most of the commands that can be executed in this way are not dangerous, but there is one which is named SWITCH_TO_SAFEZONE that is of particular interest. However let’s see what is was all about…Īvast opens a Web accessible RPC service on the local computer that can listen on port 27275. Yet these claims were proven otherwise when a researcher from Google Project Zero called Tavis Ormandy pointed to a critical loophole that could be used for hackers to gain access to the user’s PC.Īvast have already rectified this issue and they say that it is no longer a threat, but some people may still be interested in removing this program, as it may have other hidden vulnerabilities. This browser’s pet name is Avastium and it claims to offer increased security and protection. Avast Safe Zone Browser is a browser developed for the Chromium environment by the anti-virus company behind Avast anti-virus.
0 kommentar(er)
