Avast! Insecure Program File Permissions Local Privilege Escalation Vulnerability
BID:36796
Info
Avast! Insecure Program File Permissions Local Privilege Escalation Vulnerability
| Bugtraq ID: | 36796 |
| Class: | Design Error |
| CVE: |
CVE-2009-3524 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 22 2009 12:00AM |
| Updated: | Mar 19 2015 09:11AM |
| Credit: | Maxim A. Kulakov |
| Vulnerable: |
Avast! Antivirus Professional Edition 4.8.1351 Avast! Antivirus Professional Edition 4.8.1335 Avast! Antivirus Professional Edition 4.8.1169 Avast! Antivirus Professional Edition 4.7.1098 Avast! Antivirus Professional Edition 4.7.1043 Avast! Antivirus Professional Edition 4.7.844 Avast! Antivirus Professional Edition 4.7.827 Avast! Antivirus Professional Edition 4.6.691 Avast! Antivirus Professional Edition 4.6.665 Avast! Antivirus Professional Edition 4.6.652 Avast! Antivirus Professional Edition 4.6.603 Avast! Antivirus Professional Edition 4.6 Avast! Antivirus Professional Edition 4.0 Avast! Antivirus Home Edition 4.8.1351 Avast! Antivirus Home Edition 4.8.1335 Avast! Antivirus Home Edition 4.8.1169 Avast! Antivirus Home Edition 4.7.1098 Avast! Antivirus Home Edition 4.7.1043 Avast! Antivirus Home Edition 4.7.869 Avast! Antivirus Home Edition 4.7.844 Avast! Antivirus Home Edition 4.7.827 Avast! Antivirus Home Edition 4.6.691 Avast! Antivirus Home Edition 4.6.665 Avast! Antivirus Home Edition 4.6.655 Avast! Antivirus Home Edition 4.6.652 Avast! Antivirus Home Edition 4.6 Avast! Antivirus Home Edition 4.0 |
| Not Vulnerable: |
Avast! Antivirus Professional Edition 4.8.1356 Avast! Antivirus Home Edition 4.8.1356 |
Discussion
Avast! Insecure Program File Permissions Local Privilege Escalation Vulnerability
Avast! is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, resulting in a complete compromise of the affected computer,
The following versions are affected:
Avast! Professional Edition 4.8.1351 and prior.
Avast! Home Edition 4.8.1351 and prior.
Avast! is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges, resulting in a complete compromise of the affected computer,
The following versions are affected:
Avast! Professional Edition 4.8.1351 and prior.
Avast! Home Edition 4.8.1351 and prior.
Exploit / POC
Avast! Insecure Program File Permissions Local Privilege Escalation Vulnerability
An attacker can use filesystem utilities to exploit this issue.
An attacker can use filesystem utilities to exploit this issue.
Solution / Fix
Avast! Insecure Program File Permissions Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Avast! Insecure Program File Permissions Local Privilege Escalation Vulnerability
References:
References: