Description
Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Avast | Avast Antivirus | 22.5 – ≤ 22.10 | — |
| AVG | AVG Antivirus | 22.5 – ≤ 22.10 | — |
Advisories 1
- WID-SEC-2023-1041 Avast und AVG Antivirus: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Apr 19, 2023