Medium WID-SEC-2023-2834 1 CVE

Norton Antivirus: Schwachstelle ermöglicht die Erweiterung von Privilegien

Published Nov 6, 2023 · Updated Nov 8, 2023 · Revision 2 · de-DE

Vendor: Norton Product: Antivirus < 23.9 Platform: Android Platform: iOS Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Norton Antivirus ausnutzen, um Administratorrechte zu erlangen.

Product

Norton AntiVirus ist ein Antivirenprogramm.

Vulnerabilities 1

High 8.2

CVE-2023-5760

Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.

A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the…

Avast/AVG Avast/Avg Antivirus

Nov 8, 2023

Revision history

2023-11-08 #2
Bewertung angepasst
2023-11-06 #1
Initiale Fassung

References

Norton Security Advisories vom 2023-11-06
https://support.norton.com/sp/static/external/tools/security-advisories.html