VYPR
← All advisories
High severity7.4NVD Advisory· Published Mar 9, 2020· Updated Jun 17, 2026

CVE-2020-8987

CVE-2020-8987

Description

Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate certificates, and thus a man-in-the-middle can host a malicious website using a self-signed certificate. No special action necessary by the victim using AntiTrack with "Allow filtering of HTTPS traffic for tracking detection" enabled. (This is the default configuration.)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Avast\!/AntiTrack2 versions
    cpe:2.3:a:avast:antitrack:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:avast:antitrack:*:*:*:*:*:*:*:*range: <1.5.1.172
    • (no CPE)range: <1.5.1.172
  • Avast\!/Avg Antitrack
    cpe:2.3:a:avast:avg_antitrack:*:*:*:*:*:*:*:*
    Range: <2.0.0.178
  • Avast/AntiTrackdescription
  • AVG Technologies/Antitrackllm-create
    Range: <2.0.0.178

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.