AVG Anti-Virus Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	21029
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 13 2006 12:00AM
Updated:	Nov 15 2006 07:11PM
Credit:	Sergio Alvarez of n.runs AG. is credited with the discovery of these issues.
Vulnerable:	AVG AVG Anti-Virus 7.1.308 AVG AVG Anti-Virus 7.0.323 AVG AVG Anti-Virus 7.0.251 AVG AVG Anti-Virus 7.0 AVG AVG Anti-Virus 6.0.710
Not Vulnerable:	AVG AVG Anti-Virus 7.1.407

AVG Anti-Virus Multiple Remote Code Execution Vulnerabilities

AVG Anti-Virus is prone to multiple remote code-execution vulnerabilities because of flaws in the software's file-parsing engine.

Successfully exploiting these issues allows remote attackers to execute code with elevated privileges, facilitating the complete compromise of affected computers.

AVG Anti-Virus versions prior to 7.1.407 are vulnerable to these issues.

AVG Anti-Virus Multiple Remote Code Execution Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

AVG Anti-Virus Multiple Remote Code Execution Vulnerabilities

Solution:
The vendor has released fixes to address these issues. Please see the references for information on obtaining and applying fixes.

AVG Anti-Virus Multiple Remote Code Execution Vulnerabilities

References:

• AVG Anti-Virus Homepage (AVG)
  
• Program update AVG 7.1.407 (Grisoft)