PT-2020-13126 · Avira · Avira Software Updater

Published 2020-05-05 · Updated 2021-07-21 · CVE-2020-12463

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avira Software Updater versions prior to 2.0.6.27476

Description The issue arises from the improper handling of file hard links, leading to an elevation of privilege. This allows local users to take control of arbitrary files.

Recommendations For versions prior to 2.0.6.27476, update to version 2.0.6.27476 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-12463

Affected Products

Avira Software Updater

References · 3

• https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12463 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12463 · Security Note