Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

AVG Anti-Virus Local Insecure Permissions Vulnerability

AVG Anti-Virus is prone to a local insecure-permissions vulnerability. This issue is due to the application incorrectly resetting the permissions on critical files during its periodic update process.

A local, unprivileged attacker can exploit this issue to replace critical driver files with malicious executables. This may facilitate a complete compromise of the affected computer.

This issue affects AVG version 7. Other versions may also be vulnerable.







 

Privacy Statement
Copyright 2009, SecurityFocus