CVE-2016-10717

    Dashboard / Vulnerabilities / CVE-2016-10717

    CVE-2016-10717

    Published: 21 Mar 2018Last Modified: 10 Mar 2026

    Summary:

    Details: A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting feature (exclusions.dat under %SYSTEMDRIVE%\ProgramData) to permit execution of unauthorized applications including malware and malicious websites. Files blacklisted by Malwarebytes Malware Protect can be executed, and domains blacklisted by Malwarebytes Web Protect can be reached through HTTP.

    References: , https://www.youtube.com/watch?v=LF5ic5nOoUY, http://www.securitytube.net/video/16690, https://forums.malwarebytes.com/topic/158251-malwarebytes-hall-of-fame/, https://github.com/mspaling/mbam-exclusions-poc-, https://github.com/mspaling/mbam-exclusions-poc-/blob/master/mbam-whitelist-poc.txt

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High