CVE-2024-7232: Avast Free Antivirus Local Privilege Escalation via Symbolic Link

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: (0Day) Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability 2. CVE ID: CVE-2024-7232 3. CVSS Score: 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 4. Affected Vendor: Avast 5. Affected Product: Free Antivirus 6. Vulnerability Details: - This vulnerability allows a local attacker to escalate privileges on an affected Avast Free Antivirus installation. - The attacker must first gain the ability to execute low-privileged code on the target system. - The vulnerability exists in the Avast Service. By creating a symbolic link, an attacker can abuse the service to delete a folder. - Attackers can exploit this vulnerability to escalate privileges and execute arbitrary code in the SYSTEM context. 7. Additional Details: - On January 3, 2024, ZDI reported the vulnerability to Avast’s reporting team. - On February 12 and February 23, 2024, ZDI requested updates. - On March 15, 2024, ZDI notified the vendor that, due to no response, the case would be published on March 27, 2024. - On April 25, 2024, a member of the Gen Digital team stated that all security issues should be submitted through the third-party vulnerability disclosure program. - On May 16, 2024, ZDI resubmitted the vulnerability to the third-party vulnerability disclosure program. - On June 19, 2024, ZDI requested an update. - On July 26, 2024, ZDI notified the vendor that, due to no response, the case would be published on July 29, 2024. 8. Mitigation: Due to the nature of the vulnerability, the only mitigation strategy is to restrict interaction with the application. 9. Disclosure Timeline: - May 16, 2024 – Vulnerability reported to vendor - July 29, 2024 – Coordinated public disclosure of vulnerability advisory - August 15, 2024 – Advisory updated 10. Credit: Nicholas Zubrisky (@NZubrisky) and Michael DePlante (@izobashi) are credited for the Zero Day Initiative at Trend Micro.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-7232: Avast Free Antivirus Local Privilege Escalation via Symbolic Link