AVG Internet Security 2015 Arbitrary Write Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title - AVG Internet Security 2015 Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.avg.com/ Tested Version - 2015.0.5315 Driver Version - 15.0.0.52...

AVG Internet Security 2015.0.5315 - Arbitrary Write Privilege Escalation

AVG Internet Security 2015.0.5315 - Arbitrary Write Privilege Escalation / Exploit Title - AVG Internet Security 2015 Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.avg.com/ Tested Version - 2015.0.5315 Driver...

AVG Internet Security 2015.0.5315 - Arbitrary Write Privilege Escalation

/ Exploit Title - AVG Internet Security 2015 Arbitrary Write Privilege Escalation Date - 04th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.avg.com/ Tested Version - 2015.0.5315 Driver Version - 15.0.0.5204 - avgtdix.sys Tested on OS - 32bit Windows XP SP3...

AVG 'ScriptHelperApi' ActiveX Remote Code Execution

The remote host is running a version of AVG Secure Search toolbar / AVG Safeguard, prior to version 18.1.7. The AVG ScriptHelperApi ActiveX control distributed with the software is affected by a remote code execution vulnerability. The installed ActiveX control fails to properly enforce...

CVE-2014-2956

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of...

Design/Logic Flaw

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of...

CVE-2014-2956

CVE-2014-2956 affects AVG Secure Search toolbar (before 18.1.7.598) and AVG Safeguard (before 18.1.7.644). The ScriptHelperApi ActiveX control does not enforce domain-based access control for its methods, enabling remote attackers to trigger downloading/execution of arbitrary code via a crafted w...

CVE-2014-2956

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of...

CVE-2014-2956: Undefined Security Weakness

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of...

PT-2014-4981

Name of the Vulnerable Software and Affected Versions AVG Secure Search toolbar versions prior to 18.1.7.598 AVG Safeguard versions prior to 18.1.7.644 Description The issue concerns the ScriptHelperApi in the AVG ScriptHelper ActiveX control, which does not implement domain-based access control...

AVG Safeguard and Secure Search ActiveX controls provides insecure methods

Overview The AVG Secure Search toolbar, also known as AVG Safeguard includes an ActiveX control that provides a number of unsafe methods, which may allow a remote, unauthenticated attacker to execute arbitrary code with the privileges of the user. Description AVG Secure Search is a toolbar add-on...

AVG Internet Security 2011 Safe Search for IE DoS

No description provided by source. !-- Title : AVG Internet Security 2011 Safe Search for IE DoS Found By : DrIDE COM Object ID : 3CA2F312-6F6E-4B53-A66E-4E65E497C8C0 AVG Safe Search Module for IE COM Object Filename : C:\Program Files\AVG\AVG10\avgssie.dll File Version : 10.0.0.1151 Tested On :...

AVG Internet Security 9.0.851 - Local Denial of Service Exploit

No description provided by source. / Exploit Title: AVG Internet Security 0day Local DoS Exploit Date: 2010-11-01 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.avg.com Version: up to date, version 9.0.851, avgtdix.sys version 9.0.0.832 Tested on: Win XP SP3 CVE :...

SEC Consult SA-20140508-0 :: Multiple critical vulnerabilities in AVG Remote Administration

SEC Consult Vulnerability Lab Security Advisory 20140508-0 ======================================================================= title: Multiple critical vulnerabilities product: AVG Remote Administration vulnerable version: all - except issue 2 fixed version: none - except issue 2 impact:...

AVG Remote Administration multiple security vulnerabilities

Authentication bypass, code execution, static encryption key...

AVG Remote Administration Bypass / Code Execution / Static Keys

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: AVG Remote Administration vulnerable version: all - except issue 2 fixed version: none - except issue 2 impact: critical...

Threat Outbreak Alert: Fake Fund Transfer Notification Email Messages on December 5, 2013

Medium Alert ID: 32058 First Published: 2013 December 6 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain payment transfer details for the recipient. The text in the e-mail message attempts to...

Whatsapp and AVG Antivirus Website defaced by Palestinian Hackers

The Website of Word's most popular mobile messaging app and Antivirus Firm - AVG were hacked this morning and defaced by a new Palestinian Hacker group - KDMS Team, affiliated with Anonymous Group. The Defacement page titled 'You got Pwned', with Anonymous Logo and playing Palestinian national...

Whatsapp and AVG Antivirus Website defaced by Palestinian Hackers

The Website of Word's most popular mobile messaging app and Antivirus Firm - AVG were hacked this morning and defaced by a new Palestinian Hacker group - KDMS Team, affiliated with Anonymous Group. The Defacement page titled 'You got Pwned', with Anonymous Logo and playing Palestinian national...

AVG Official Blog Cross Site Scripting

Title : Cross Site Scripting in AVG Official Blog Author : Ryuzaki Lawlet Blog : justryuz.blogspot.com / www.justryuz.com E-mail : [email protected] / [email protected] / [email protected] Date: 6/5/2013 4.44 pm Vendor: http://wordpress.org/plugins/nextgen-gallery/ Type : Web Apps Vect...