Multiple vulnerabilities in AVG AntiVirus Free
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 4 |
| CVE-ID | CVE-2024-7236 CVE-2024-7235 CVE-2024-7237 CVE-2024-7234 |
| CWE-ID | CWE-61 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
AntiVirus Free Client/Desktop applications / Antivirus software/Personal firewalls |
| Vendor |
Security Bulletin
This security bulletin contains information about 4 vulnerabilities.
1) UNIX symbolic link following
EUVDB-ID: #VU96094
Risk: Low
CVSSv3.1: 4.6 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-7236
CWE-ID:
CWE-61 - UNIX Symbolic Link (Symlink) Following
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a symlink following issue within the AVG Installer in icarus function. A local user can abuse the update functionality to create a file and cause a denial of service condition on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAntiVirus Free: before 24.0
CPE2.3http://www.zerodayinitiative.com/advisories/ZDI-24-1009/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) UNIX symbolic link following
EUVDB-ID: #VU96180
Risk: Low
CVSSv3.1: 5.3 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-7235
CWE-ID:
CWE-61 - UNIX Symbolic Link (Symlink) Following
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a symlink following issue within the AVG Installer. A local user can abuse the service to create a folder and cause a denial of service condition on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAntiVirus Free: before 24.0
CPE2.3http://www.zerodayinitiative.com/advisories/ZDI-24-1006/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) UNIX symbolic link following
EUVDB-ID: #VU96115
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-7237
CWE-ID:
CWE-61 - UNIX Symbolic Link (Symlink) Following
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a symlink following issue within the AVG Service in AVGSvc function. A local user can create a specially crafted symbolic link to abuse the service to delete a folder and gain elevated privileges on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAntiVirus Free: before 24.0
CPE2.3http://www.zerodayinitiative.com/advisories/ZDI-24-1007/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) UNIX symbolic link following
EUVDB-ID: #VU96095
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-7234
CWE-ID:
CWE-61 - UNIX Symbolic Link (Symlink) Following
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a symlink following issue within the AVG Service in AVGSvc function. A local user can create a specially crafted symbolic link to abuse the service to delete a file and gain elevated privileges on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsAntiVirus Free: before 24.0
CPE2.3http://www.zerodayinitiative.com/advisories/ZDI-24-1008/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
