VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability

CVE-2023-32178

What is CVE-2023-32178?

The vulnerability found in VIPRE Antivirus Plus relates to its TelFileTransfer method, which can be exploited by local attackers to escalate their privileges. To take advantage of this vulnerability, an attacker must first execute low-privileged code on the system. By creating a symbolic link, the attacker can manipulate the TelFileTransfer method, allowing them to delete arbitrary files. This exploitation leads to a significant security concern as it enables control over the system context, potentially allowing for the execution of arbitrary code at the SYSTEM level.

References