VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability

CVE-2023-32177

What is CVE-2023-32177?

A vulnerability within the DeleteHistoryFile method of VIPRE Antivirus Plus allows local attackers to exploit improper validation of user-supplied paths. This flaw enables an attacker, who has already gained low-privileged access to the system, to escalate their privileges. By manipulating this vulnerability, an attacker can execute arbitrary code with SYSTEM-level privileges, potentially compromising the security of the entire system. Protecting against this issue requires immediate updates to the latest product versions.

References