Description
A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg Antivirus: 23.8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Avast/AVG | Avast/Avg Antivirus | 23.8 | — |
Advisories 1
- WID-SEC-2023-2834 Norton Antivirus: Schwachstelle ermöglicht die Erweiterung von Privilegien BSI CERT-Bund (WID) · Nov 8, 2023