PT-2007-5015 · Grisoft · Avg Anti-Virus+1

Published 2007-07-15 · Updated 2018-10-15 · CVE-2007-3777

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Grisoft AVG Anti-Virus versions 7.5.0.444 through 7.5.448 Grisoft AVG Anti-Virus Free Edition version 7.5.446

Description The issue allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler. This is due to an internal function in the avg7core.sys driver that copies data to an arbitrary address.

Recommendations For Grisoft AVG Anti-Virus versions 7.5.0.444 through 7.5.448, consider restricting access to the DeviceIoControl handler until a patch is available. For Grisoft AVG Anti-Virus Free Edition version 7.5.446, avoid using the 0x5348E004 IOCTL until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-3777

Affected Products

Avg Anti-Virus

Avg Anti-Virus Free Edition

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-3777 · Security Note
• http://secunia.com/advisories/25998 · Vendor Advisory
• http://securityreason.com/securityalert/2887 · Note
• http://securityfocus.com/bid/24870 · Note
• http://securitytracker.com/id?1018362 · Note
• http://securityfocus.com/archive/1/473360/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35345 · Note
• http://osvdb.org/37975 · Note
• http://vupen.com/english/advisories/2007/2518 · Note