PT-2023-5683 · Avast · Avast Premium Security

Abdelhamid Naceri · Publicado 2023-02-22 · Atualizado 2025-08-13 · CVE-2023-42124

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avast Premium Security (affected versions not specified)

Description This issue allows local attackers to escalate privileges on affected installations. The flaw exists within the implementation of the sandbox feature due to incorrect authorization, enabling an attacker to execute arbitrary code outside the sandbox at medium integrity. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

CWE-265

Identificadores relacionados

BDU:2023-06351

CVE-2023-42124

ZDI-23-1474

Produtos afetados

Avast Premium Security

Referências · 9

• https://bdu.fstec.ru/vul/2023-06351 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-42124 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-23-1475 · Nota
• https://vuldb.com/ru/?id.240795 · Nota
• https://twitter.com/CVEnew/status/1786770996617236643 · Publicação no Twitter
• https://zerodayinitiative.com/advisories/ZDI-23-1474 · Nota de Segurança
• https://twitter.com/TheZDIBugs/status/1707508178856927419 · Publicação no Twitter
• https://t.me/cveNotify/132022 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-42124 · Aviso do Fabricante