This host is installed with Malwarebytes Anti-Exploit and is prone to man in the middle attack through it's upgrade functionality.

Successful exploitation will allow remote attackers to execute arbitrary code by spoofing the update server and uploading an executable. Impact Level: Application

Upgrade to version 1.04.1.1012 or later, For updates refer to https://www.malwarebytes.org

MBAE client does not verify the actual installer it downloads. This is combined with the fact that MBAE starts the new client installer with full administrative privileges.

Malwarebytes Anti-Exploit (MBAE) Consumer versions prior to 1.04.1.1012 on Windows

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://blog.0x3a.com/post/104954032239/cve-2014-4936-malwarebytes-anti-malware-and
• http://osvdb.org/116050
• https://github.com/0x3a/CVE-2014-4936

---

Updated on 2015-03-25