CVE-2024-7237 AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

CVE-2024-7237 AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

CVE-2024-7235

CVE-2024-7235 affects AVG AntiVirus Free. The flaw is in the AVG Service: an attacker who can run low-privilege code locally can abuse a symbolic link to cause a denial-of-service by creating a folder. This is a local, high-availability impact vulnerability. Public exploitation details are not pr...

CVE-2024-7233

The CVE-2024-7233 entry covers Avast Free Antivirus where the AvastSvc service is vulnerable to a local privilege escalation via symbolic link manipulation. The flaw allows an attacker who can run low-privileged code to abuse the Avast Service to delete a folder and escalate privileges to SYSTEM,...

CVE-2024-7233 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system ...

CVE-2024-7233 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system ...

CVE-2024-7227 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system ...

CVE-2024-7227 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system ...

CVE-2024-7229 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-7229 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-7229

CVE-2024-7229 describes a local privilege escalation in Avast Cleanup Premium. The flaw exists in the Avast Cleanup Service : by creating a symbolic link, an attacker who can run low-privileged code can abuse the service to delete a file and escalate privileges, gaining the ability to execute arb...

CVE-2024-7231

CVE-2024-7231 relates to Avast Cleanup Premium. The vulnerability exists in the Avast Cleanup Service: by creating a symbolic link, a local attacker who can run low-privileged code can abuse the service to delete a file and escalate privileges to SYSTEM. This is a local privilege escalation, with...

CVE-2024-7230

CVE-2024-7230 describes a local privilege escalation in Avast Cleanup Premium. The flaw exists in the Avast Cleanup Service: an attacker who can run low-privilege code can abuse symbolic links to delete a file and escalate to SYSTEM, potentially executing arbitrary code. Affected product: Avast C...

CVE-2024-7228 Avast Free Antivirus Link Following Denial-of-Service Vulnerability

Avast Free Antivirus Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on the target system i...

CVE-2024-7228

CVE-2024-7228 affects Avast Free Antivirus. The flaw exists in the Avast Service where an attacker can abuse a symbolic link to create a folder, enabling a local, low-privilege code execution path that can drive a denial-of-service condition on vulnerable installations. Reports from ZDI describe ...

CVE-2024-8025 Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that...

CVE-2024-8025 Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that...

CVE-2024-9261 IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-9260

CVE-2024-9260 affects IrfanView via SID file parsing. The root cause is insufficient validation of user-supplied SID data, leading to a write past the end of an allocated buffer (out-of-bounds write). This vulnerability can allow remote code execution in the context of the current process and req...

CVE-2024-9260 IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...