CVE-2020-13657
Summary
| CVE | CVE-2020-13657 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-06-29 18:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Avast | Avg Antivirus | All | All | All | All |
| Application | Avast | Avg Antivirus | All | All | All | All |
| Application | Avast | Free Antivirus | All | All | All | All |
| Application | Avast | Free Antivirus | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Release history with notes (2020) | CONFIRM | forum.avast.com | Release Notes, Vendor Advisory |
| NEW Avast Version 20.4 (June 2020) | CONFIRM | forum.avast.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.