PT-2019-12204 · Avast · Avast Antivirus

Published 2019-07-18 · Updated 2019-07-24 · CVE-2019-11230

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 19.4

Description A local administrator can exploit a defect in the product by replacing the LogsUpdate.log file with a symlink, allowing them to rename arbitrary files. This can be used to rename critical product files, such as AvastSvc.exe, which can cause the product to fail to start on the next system restart.

Recommendations For versions prior to 19.4, update to version 19.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the LogsUpdate.log file to prevent symlink replacement until a patch is applied.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2019-11230

Affected Products

Avast Antivirus

References · 4

• 🔥 http://mcerlane.co.uk/CVE-2019-11230 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-11230 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11230 · Vendor Advisory
• http://securityfocus.com/bid/109344 · Note