AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the AVG Service. By creating a symbolic link, an attacker can abuse the service to delete a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22960.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.zerodayinitiative.com/advisories/ZDI-24-1007/ |
History
Thu, 19 Dec 2024 19:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Avg antivirus
|
|
CPEs | cpe:2.3:a:avg:antivirus:23.12.8700.813:-:*:*:free:*:*:* | |
Vendors & Products |
Avg antivirus
|
|
Metrics |
cvssV3_1
|
Thu, 05 Dec 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Avg
Avg anti-virus |
|
CPEs | cpe:2.3:a:avg:anti-virus:23.12.8700.813:*:*:*:*:*:*:* | |
Vendors & Products |
Avg
Avg anti-virus |
|
Metrics |
ssvc
|
Fri, 22 Nov 2024 21:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AVG Service. By creating a symbolic link, an attacker can abuse the service to delete a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22960. | |
Title | AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability | |
Weaknesses | CWE-59 | |
References |
| |
Metrics |
cvssV3_0
|
MITRE
Status: PUBLISHED
Assigner: zdi
Published: 2024-11-22T21:12:05.971Z
Updated: 2024-12-05T14:30:46.210Z
Reserved: 2024-07-29T20:27:09.535Z
Link: CVE-2024-7237
Vulnrichment
Updated: 2024-12-05T14:30:40.448Z
NVD
Status : Analyzed
Published: 2024-11-22T22:15:16.547
Modified: 2024-12-19T19:25:49.767
Link: CVE-2024-7237
Redhat
No data.