VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability

CVE-2023-32175

What is CVE-2023-32175?

A local privilege escalation vulnerability affects installations of VIPRE Antivirus Plus due to a flaw in the Anti Malware Service. This vulnerability enables local attackers who can execute low-privileged code to escalate their privileges on the target system. By creating a symbolic link, an attacker can exploit this flaw to manipulate the service, thereby creating arbitrary files and executing arbitrary code with SYSTEM-level privileges. This poses significant security risks, as it allows attackers to gain higher levels of access than intended, potentially compromising the integrity of the entire system. For further information, refer to the vendor-provided release notes and the Zero Day Initiative advisory.

References