This host is installed with Malwarebytes Anti-Malware and is prone to man in the middle attack through it's upgrade functionality.

Successful exploitation will allow remote attackers to execute arbitrary code by spoofing the update server and uploading an executable. Impact Level: Application

Upgrade to version 2.0.3 or later, For updates refer to https://www.malwarebytes.org

MBAM client does not verify the actual installer it downloads. This is combined with the fact that MBAM starts the new client installer with full administrative privileges.

Malwarebytes Anti-Malware (MBAM) Consumer versions before 2.0.3 on Windows

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://blog.0x3a.com/post/104954032239/cve-2014-4936-malwarebytes-anti-malware-and
• http://osvdb.org/116050
• https://github.com/0x3a/CVE-2014-4936

---

Updated on 2015-03-25