AVG Antivirus 'hcp://' Protocol Handler Security Bypass Vulnerability
BID:44189
Info
AVG Antivirus 'hcp://' Protocol Handler Security Bypass Vulnerability
| Bugtraq ID: | 44189 |
| Class: | Configuration Error |
| CVE: |
CVE-2010-3498 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 18 2010 12:00AM |
| Updated: | Mar 19 2015 09:33AM |
| Credit: | [email protected] |
| Vulnerable: |
AVG AVG Anti-Virus 8.0.156 AVG AVG Anti-Virus 8.0 AVG AVG Anti-Virus 8.5 323 |
| Not Vulnerable: | |
Discussion
AVG Antivirus 'hcp://' Protocol Handler Security Bypass Vulnerability
AVG Antivirus is prone to a security-bypass vulnerability that may allow an attacker to bypass virus scans.
Successful exploits will allow attackers to bypass virus scanning, possibly allowing malicious files to escape detection..
AVG Antivirus is prone to a security-bypass vulnerability that may allow an attacker to bypass virus scans.
Successful exploits will allow attackers to bypass virus scanning, possibly allowing malicious files to escape detection..
Exploit / POC
AVG Antivirus 'hcp://' Protocol Handler Security Bypass Vulnerability
Attackers can exploit this issue by sending malicious files to affected users.
Attackers can exploit this issue by sending malicious files to affected users.
Solution / Fix
AVG Antivirus 'hcp://' Protocol Handler Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
AVG Antivirus 'hcp://' Protocol Handler Security Bypass Vulnerability
References:
References:
- antivirus-cve (noobz Network)
- AVG Anti-Virus Homepage (AVG)
- Antivirus detection after malware execution ([email protected])