CVE-2021-45338

Sažetak

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.

Reference

https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.2
https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.3
https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.1
https://www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0

CVSS

Base:	7.2
Impact:	10.0
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:L/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

12-07-2022 - 17:42

Objavljeno

27-12-2021 - 14:15