PT-2006-2152 · Grisoft · Avg Free

Published 2006-03-09 · Updated 2017-07-20 · CVE-2006-1125

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Grisoft AVG Free versions 7.0.308 through 7.1

Description The issue allows local users to potentially gain privileges due to the setting of Everyone/Full Control permissions for certain update files, including upd vers.cfg and incavi.avm, as well as unspecified drivers.

Recommendations For Grisoft AVG Free version 7.1, consider restricting access to the update files upd vers.cfg, incavi.avm, and the unspecified drivers to minimize the risk of exploitation. For Grisoft AVG Free version 7.0.308, restrict access to the same files as mentioned for version 7.1 to prevent potential privilege escalation.

Fix

Related Identifiers

CVE-2006-1125

Affected Products

Avg Free

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-1125 · Security Note
• http://securityfocus.com/bid/16952 · Patch
• http://secunia.com/advisories/19118 · Patch
• http://securitytracker.com/id?1015728 · Vendor Advisory
• http://dslreports.com/forum/remark%2C15601404 · Note
• http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25139 · Note
• http://vupen.com/english/advisories/2006/0845 · Note