Lucene search

[email protected]CVE-2006-1125

HistoryMar 09, 2006 - 9:02 p.m.

CVE-2006-1125

2006-03-0921:02:00

[email protected]

web.nvd.nist.gov

cve-2006-1125

grisoft avg free

privilege escalation

local user

nvd

6.7 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.4%

JSON

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including (1) upd_vers.cfg, (2) incavi.avm, and (3) unspecified drivers, which might allow local users to gain privileges.

Affected configurations

NVD

Node

grisoftavg_antivirusMatch7.0

grisoftavg_antivirusMatch7.0.251

grisoftavg_antivirusMatch7.0.323

grisoftavg_antivirusMatch7.1.308

CPENameOperatorVersion
grisoft:avg_antivirusgrisoft avg antiviruseq7.0
grisoft:avg_antivirusgrisoft avg antiviruseq7.0.251
grisoft:avg_antivirusgrisoft avg antiviruseq7.0.323
grisoft:avg_antivirusgrisoft avg antiviruseq7.1.308

CPE	Name	Operator	Version
grisoft:avg_antivirus	grisoft avg antivirus	eq	7.0
grisoft:avg_antivirus	grisoft avg antivirus	eq	7.0.251
grisoft:avg_antivirus	grisoft avg antivirus	eq	7.0.323
grisoft:avg_antivirus	grisoft avg antivirus	eq	7.1.308

References

archives.neohapsis.com/archives/bugtraq/2006-02/0631.html

secunia.com/advisories/19118

securitytracker.com/id?1015728

www.dslreports.com/forum/remark%2C15601404

www.securityfocus.com/bid/16952

www.vupen.com/english/advisories/2006/0845

exchange.xforce.ibmcloud.com/vulnerabilities/25139

6.7 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.4%

JSON

Related for CVE-2006-1125

prion1 nvd1 cvelist1