VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability

CVE-2023-32177

What is CVE-2023-32177?

A vulnerability within the DeleteHistoryFile method of VIPRE Antivirus Plus allows local attackers to exploit improper validation of user-supplied paths. This flaw enables an attacker, who has already gained low-privileged access to the system, to escalate their privileges. By manipulating this vulnerability, an attacker can execute arbitrary code with SYSTEM-level privileges, potentially compromising the security of the entire system. Protecting against this issue requires immediate updates to the latest product versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References