AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability

AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AVG Installer. By creating a symbolic link, an attacker can abuse the update functionality to create a file. An attacker can leverage this vulnerability to create a persistent denial-of-service condition on the system. Was ZDI-CAN-22942.

N/A

在文件访问前对链接解析不恰当(链接跟随)

AVG AntiVirus Free 后置链接漏洞

AVG AntiVirus Free是AVG公司的一套免费的杀毒软件。 AVG AntiVirus Free存在后置链接漏洞，该漏洞源于AVG Installer中的icarus任意文件创建导致的拒绝服务问题，可能导致攻击者通过创建文件的方式，在系统上创建持久性的拒绝服务条件。

N/A

N/A