CVE-2014-4936

Name of the Vulnerable Software and Affected Versions Malwarebytes Anti-Malware (MBAM) versions prior to 2.0.3 Malwarebytes Anti-Exploit (MBAE) versions prior to 1.04.1.1012

Description The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable. This is related to the upgrade functionality.

Recommendations For Malwarebytes Anti-Malware (MBAM) versions prior to 2.0.3, update to version 2.0.3 or later. For Malwarebytes Anti-Exploit (MBAE) versions prior to 1.04.1.1012, update to version 1.04.1.1012 or later.