AVG Remote Administration 'ClientLibraryName' Parameter Remote Code Execution Vulnerability

Bugtraq ID:	67272
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 08 2014 12:00AM
Updated:	May 08 2014 12:00AM
Credit:	Stefan Viehböck
Vulnerable:
Not Vulnerable:

AVG Remote Administration 'ClientLibraryName' Parameter Remote Code Execution Vulnerability

AVG Remote Administration is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will likely cause denial-of-service conditions.

AVG Remote Administration 13.0.0.2892 is vulnerable; other versions may also be affected.

AVG Remote Administration 'ClientLibraryName' Parameter Remote Code Execution Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AVG Remote Administration 'ClientLibraryName' Parameter Remote Code Execution Vulnerability

Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.

AVG Remote Administration 'ClientLibraryName' Parameter Remote Code Execution Vulnerability

References:

• AVG Homepage (AVG)