PT-2020-13644 · Avg+1 · Avg Antivirus Free+1

Published 2020-06-29 · Updated 2021-07-21 · CVE-2020-13657

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Avast Free Antivirus versions prior to 20.4 AVG AntiVirus Free versions prior to 20.4

Description An elevation of privilege issue exists due to improper handling of hard links, allowing local users to take control of arbitrary files.

Recommendations For Avast Free Antivirus versions prior to 20.4, update to version 20.4 or later to resolve the issue. For AVG AntiVirus Free versions prior to 20.4, update to version 20.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-13657

Affected Products

Avg Antivirus Free

Avast Free Antivirus

References · 4

• https://forum.avast.com/index.php?topic=232423.0 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13657 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13657 · Vendor Advisory
• https://forum.avast.com/index.php?topic=234638.0 · Vendor Advisory