PT-2024-6221 · Avg · Avg Internet Security
Published
2024-09-12
·
Updated
2024-10-02
·
CVE-2024-6510
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
AVG Internet Security version v24
Description
A local privilege escalation issue in AVG Internet Security allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking. This issue is related to the use of dangerous methods or functions. The exploitation of this issue may allow an attacker to elevate their privileges.
Recommendations
For AVG Internet Security version v24, consider disabling the COM-Hijacking functionality as a temporary workaround until a patch is available. Restrict access to trusted processes to minimize the risk of exploitation. Avoid using the affected functionality in the context of a trusted process until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Incorrect Permission
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Avg Internet Security