CVE-2024-7236— AVG AntiVirus Free 后置链接漏洞

AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability

AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AVG Installer. By creating a symbolic link, an attacker can abuse the update functionality to create a file. An attacker can leverage this vulnerability to create a persistent denial-of-service condition on the system. Was ZDI-CAN-22942.

N/A

在文件访问前对链接解析不恰当(链接跟随)

AVG AntiVirus Free 后置链接漏洞

AVG AntiVirus Free是AVG公司的一套免费的杀毒软件。 AVG AntiVirus Free存在后置链接漏洞，该漏洞源于AVG Installer中的icarus任意文件创建导致的拒绝服务问题，可能导致攻击者通过创建文件的方式，在系统上创建持久性的拒绝服务条件。

N/A

N/A