AVG Anti-Virus Local Insecure Permissions Vulnerability
BID:16952
Info
AVG Anti-Virus Local Insecure Permissions Vulnerability
| Bugtraq ID: | 16952 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 04 2006 12:00AM |
| Updated: | Mar 10 2006 07:20AM |
| Credit: | [email protected] disclosed this issue. |
| Vulnerable: |
AVG AVG Anti-Virus 7.1.308 AVG AVG Anti-Virus 7.0.323 AVG AVG Anti-Virus 7.0.251 AVG AVG Anti-Virus 7.0 |
| Not Vulnerable: |
AVG AVG 7.1.384 |
Discussion
AVG Anti-Virus Local Insecure Permissions Vulnerability
AVG Anti-Virus is prone to a local insecure-permissions vulnerability. This issue is due to the application incorrectly resetting the permissions on critical files during its periodic update process.
A local, unprivileged attacker can exploit this issue to replace critical driver files with malicious executables. This may facilitate a complete compromise of the affected computer.
This issue affects AVG version 7. Other versions may also be vulnerable.
AVG Anti-Virus is prone to a local insecure-permissions vulnerability. This issue is due to the application incorrectly resetting the permissions on critical files during its periodic update process.
A local, unprivileged attacker can exploit this issue to replace critical driver files with malicious executables. This may facilitate a complete compromise of the affected computer.
This issue affects AVG version 7. Other versions may also be vulnerable.
Exploit / POC
AVG Anti-Virus Local Insecure Permissions Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
AVG Anti-Virus Local Insecure Permissions Vulnerability
Solution:
The vendor has released an update to address this issue. Users of affected packages should utilize the application's built-in update feature to download and install the fix.
Solution:
The vendor has released an update to address this issue. Users of affected packages should utilize the application's built-in update feature to download and install the fix.
References
AVG Anti-Virus Local Insecure Permissions Vulnerability
References:
References: