Medium WID-SEC-2022-2230 1 CVE

Avast und AVG Antivirus: Schwachstelle ermöglicht Privilegieneskalation

Published Dec 5, 2022 · Updated Dec 6, 2022 · Revision 2 · de-DE

Vendor: Avast Vendor: AVG Product: Anti-Virus < 22.10 Product: Antivirus < 22.10 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Avast und AVG Antivirus ausnutzen, um seine Privilegien zu erhöhen.

Product

Avast ist ein Antivirus Produkt von der Firma ALWIL Software.

Vulnerabilities 1

High 7.3

CVE-2022-4173

Avast and AVG Antivirus for Windows vulnerable to Privilege Escalation

A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.

Nortonlifelock Avast and AVG Antivirus

Dec 5, 2022

Revision history

2022-12-06 #2
AVG Antivirus ebenfalls betroffen
2022-12-05 #1
Initiale Fassung

References

Norton Security Advisory vom 2022-12-05
https://support.norton.com/sp/static/external/tools/security-advisories.html