VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability

CVE-2023-32179

What is CVE-2023-32179?

A local privilege escalation issue exists within VIPRE Antivirus Plus, specifically targeting the FPQuarTransfer method. This flaw enables local attackers with access to execute low-privileged code on the system to escalate their privileges. By crafting a symbolic link, an attacker can manipulate the method to remove arbitrary files, thus gaining access to execute code with SYSTEM-level permissions. This poses significant security risks to installations of the affected product, necessitating immediate attention from users to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References