CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
5.1%
avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler.
Vendor | Product | Version | CPE |
---|---|---|---|
grisoft | avg_antivirus | 7.5.446 | cpe:2.3:a:grisoft:avg_antivirus:7.5.446:*:free:*:*:*:*:* |
grisoft | avg_antivirus | 7.5.448 | cpe:2.3:a:grisoft:avg_antivirus:7.5.448:*:*:*:*:*:*:* |