Multiple Avira AntiVir Products 'CreateProcess()' Local Privilege Escalation Vulnerabilty

Bugtraq ID:	33291
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 15 2009 12:00AM
Updated:	Jan 16 2009 11:42PM
Credit:	Thierry Zoller
Vulnerable:	AVIRA Premium Security Suite 0 AVIRA AntiVir Professional 0 AVIRA AntiVir Premium 0
Not Vulnerable:

Multiple Avira AntiVir Products 'CreateProcess()' Local Privilege Escalation Vulnerabilty

Multiple Avira products are prone to a local privilege-escalation vulnerability because they insecurely make a 'CreateProcess()' API function call.

A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, which may facilitate a complete compromise of the affected computer.

The following applications are vulnerable:

Avira AntiVir Premium
Avira Premium Security Suite
Avira AntiVir Professional

Multiple Avira AntiVir Products 'CreateProcess()' Local Privilege Escalation Vulnerabilty

A local attacker can use readily available tools to exploit this issue.

Multiple Avira AntiVir Products 'CreateProcess()' Local Privilege Escalation Vulnerabilty

Solution:
Vendor updates are available. Contact the vendor for more information.

Multiple Avira AntiVir Products 'CreateProcess()' Local Privilege Escalation Vulnerabilty

References:

• [TZO-2009-2] Avira Antivir - Priviledge escalation (Thierry Zoller)
  
• Avira Homepage (Avira)
  
• Priviledge escalation + Autostart vector (Avira)
  
• [TZO-2009-2] Avira Antivir - Priviledge escalation (Thierry Zoller )