PT-2006-2152 · Grisoft · Avg Free

Publicado 2006-03-09 · Atualizado 2017-07-20 · CVE-2006-1125

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Grisoft AVG Free versions 7.0.308 through 7.1

Description The issue allows local users to potentially gain privileges due to the setting of Everyone/Full Control permissions for certain update files, including upd vers.cfg and incavi.avm, as well as unspecified drivers.

Recommendations For Grisoft AVG Free version 7.1, consider restricting access to the update files upd vers.cfg, incavi.avm, and the unspecified drivers to minimize the risk of exploitation. For Grisoft AVG Free version 7.0.308, restrict access to the same files as mentioned for version 7.1 to prevent potential privilege escalation.

Correção

Identificadores relacionados

CVE-2006-1125

Produtos afetados

Avg Free

Referências · 8

• http://dslreports.com/forum/remark%2C15601404 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1125 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25139 · Nota
• http://securityfocus.com/bid/16952 · Correção
• http://secunia.com/advisories/19118 · Correção
• http://securitytracker.com/id?1015728 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0845 · Nota