Remote Code Execution Vulnerability in AVG Anti-Virus

CVE-2010-3498

What is CVE-2010-3498?

AVG Anti-Virus suffers from a vulnerability arising from improper handling of hcp:// URLs by the Microsoft Help and Support Center. This flaw enables remote attackers to execute arbitrary code by exploiting malware that, while detected by AVG, is processed too late for effective mitigation. As a result, the execution of malicious code can occur before the antivirus solution can respond, compromising system integrity and user security.

References