AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AVG Service. ...

PT-2024-38196 · Avg · Avg Antivirus Free

Name of the Vulnerable Software and Affected Versions: AVG AntiVirus Free affected versions not specified Description: This issue allows local attackers to create a denial-of-service condition on affected installations. An attacker must first obtain the ability to execute low-privileged code on t...

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AVG Service. ...

AVG AntiVirus Free Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2023-5760

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

Design/Logic Flaw

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2023-5760

CVE-2023-5760 affects Avast/Avg Antivirus version 23.8. A TOCTOU bug in handling of IOCTL requests enables an out-of-bounds write, enabling a local privilege escalation. Public exploitation details are not provided in the connected documents. No remediation/fix information is listed for Avast/Avg...

CVE-2023-5760 Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

CVE-2023-5760 Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.

A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg...

PT-2023-32308 · Avast · Avg/Avast Antivirus

Name of the Vulnerable Software and Affected Versions: Avast/Avg Antivirus version 23.8 Description: A time-of-check to time-of-use TOCTOU bug in handling of IOCTL input/output control requests leads to an out-of-bounds write vulnerability. This can be further exploited, allowing an attacker to...

AVG Anti Spyware 7.5 - Unquoted Service Path (AVG Anti-Spyware Guard) Vulnerability

Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software Link: https://www.avg.com/en-ww/homepagepc Version: 7.5 Tested on: Microsoft Windows 10 Pro CVE : CVE-2023-36167 PoC C:\Userswmic service get...

AVG Anti Spyware 7.5 - Unquoted Service Path _AVG Anti-Spyware Guard_

Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software Link: https://www.avg.com/en-ww/homepagepc Version: 7.5 Tested on: Microsoft Windows 10 Pro CVE : CVE-2023-36167 PoC C:\Userswmic service get...

AVG Anti Spyware 7.5 Unquoted Service Path

Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software Link: https://www.avg.com/en-ww/homepagepc Version: 7.5 Tested on: Microsoft Windows 10 Pro CVE : CVE-2023-36167 PoC C:\Userswmic service get...

PT-2023-25467 · Avg · Avg Anti-Spyware

Name of the Vulnerable Software and Affected Versions: AVG Anti-Spyware version 7.5 Description: An issue in AVG Anti-Spyware allows an attacker to execute arbitrary code via a crafted script to the guard.exe component. Recommendations: For AVG Anti-Spyware version 7.5, consider updating to a new...

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to cause service interruptions...

CVE-2023-1587

Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11...

CVE-2023-1587

Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11...

CVE-2023-1586

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use TOCTOU vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11...

CVE-2023-1585

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use TOCTOU vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later...