CVE-2020-10863: 
Avast Antivirus vulnerability analysis and mitigation

An issue was discovered in Avast Antivirus before version 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine (NVD).

The vulnerability affects the TaskEx library within the Avast Service (AvastSvc.exe) and specifically involves the aswTask RPC endpoint. The issue allows unauthorized shutdown commands to be executed through RPC calls from a Low Integrity process. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 HIGH with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability allows attackers to trigger system shutdowns through unauthorized RPC calls, potentially leading to denial of service conditions. Since the attack can be executed from a Low Integrity process, it presents a significant availability risk to affected systems (Github Disclosure).

The vulnerability was addressed in Avast Antivirus version 20. Users should upgrade to this version or later to mitigate the risk. No specific workarounds were published for users unable to upgrade immediately (NVD).