CVE-2017-5566

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

CVE-2017-5566

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

CVE-2017-5566

CVE-2017-5566 affects AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier. The issue is a local code-injection vulnerability (DoubleAgent) that bypasses AVG’s self-protection by abusing Windows Application Verifier DLL loading via an Imag...

CVE-2017-5566: Uncontrolled Search Path Element

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

PT-2017-16578

Name of the Vulnerable Software and Affected Versions AVG Ultimate versions 17.1 and earlier AVG Internet Security versions 17.1 and earlier AVG AntiVirus FREE versions 17.1 and earlier Description A code injection issue allows a local attacker to bypass a self-protection mechanism, inject...

Free Open Source Self Hosted VirusTotal: Malice

Free Open Source Self Hosted VirusTotal Malice’s mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company.’ Ubuntu Install: Install Go $ sudo add-apt-repository ppa:ubuntu-lxc/lxd-stable $ sudo apt-get updat...

AVG Internet Security avgtdix.sys Kernel Driver Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of AVG Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of...

AVG Internet Security avgidsdriverx.sys Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of AVG Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of...

AVG Internet Security avgtdix.sys Kernel Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of AVG Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of...

Antivirus firm Avast to Buy its rival AVG for $1.3 Billion

Breaking News for Today: Antivirus company Avast Software is planning to acquire Dutch rival AVG Technologies for $1.3 Billion in cash. Avast announced today that it would buy Amsterdam-based AVG Technologies for $25 per share in an all-cash transaction valued at $1.3 Billion in an aim to expand...

AVG Cleaner for Xperia™ - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application AVG Cleaner for Xperia™ published at the 'play' market has multiple vulnerabilities...

AVG Cleaner: boost your mobile - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AVG Cleaner: boost your mobile published at the 'play' market has multiple vulnerabilities...

AVG Zen – Protect more devices - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AVG Zen – Protect more devices published at the 'play' market has multiple vulnerabilities...

AVG Threat Labs - Cross Site Request Forgery Vulnerability

Document Title: =============== AVG Threat Labs - Cross Site Request Forgery Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1660 Release Date: ============= 2016-03-03 Vulnerability Laboratory ID VL-ID: ====================================...

AVG Threat Labs - Cross Site Request Forgery Vulnerability

Document Title: =============== AVG Threat Labs - Cross Site Request Forgery Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1660 Release Date: ============= 2016-03-03 Vulnerability Laboratory ID VL-ID: ====================================...

AVG Internet Security 2015.5736 Address Space Layout Disclosure

The AVG Internet Security application installed on the remote Windows host is a version between 2015.5315 through 2015.5751, inclusive, with a virus definition database prior to version 9364. It is, therefore, affected by an information disclosure vulnerability due to insecure allocation of memor...

AVG Internet Security Out-of-Date

The remote host is running AVG Internet Security. However, the installation version, or its virus definition database, is not up to date. Using an out-of-date installation or virus database may allow this host, or potentially other hosts e.g., a mail or file server, to become infected by a virus ...

Google浏览器AVG Web TuneUp插件XSS漏洞

今年8月15日, 来自project zero的成员Tavis提交了谷歌浏览器插件 AVG Web TuneUp的多个漏洞，由于该插件活跃用户约900万，所以影响范围非常广。 这个插件添加了很多的api用来操作谷歌浏览器，比如可以轻易的劫持搜索框和新标签页。而由于其安装过程十分复杂，所以能够逃避谷歌恶意软件的检查，特别是能够逃避谷歌浏览器“阻止滥用扩展的API”的检查。 事实上其中的很多api是有问题的，攻击者可以通过构造payload成功盗取用户在avg.com上的cookie，还可以获取用户的浏览记录以及其他的私人数据，甚至有可能成功实施任意命令执行。 攻击手法：...

The vulnerability of the antivirus software AVG InternetSecurity allows a hacker to bypass the DEP and ASLR protection mechanisms.

The vulnerability of the AVG InternetSecurity antivirus software relates to the possibility of memory access with read, write, and execute permissions. Exploiting this vulnerability can allow a malicious actor to bypass the User Process DEP and ASLR protection mechanisms...

The vulnerabilities of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security allow attackers to bypass the DEP and ASLR protection mechanisms.

The vulnerability of McAfee VirusScan Enterprise, AVG InternetSecurity, and Kaspersky Total Security anti-virus tools is related to the allocation of memory with read, write, and execute permissions during the protection of user processes. Exploiting this vulnerability can allow a malicious actor...