VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability

CVE-2023-32179

What is CVE-2023-32179?

A local privilege escalation issue exists within VIPRE Antivirus Plus, specifically targeting the FPQuarTransfer method. This flaw enables local attackers with access to execute low-privileged code on the system to escalate their privileges. By crafting a symbolic link, an attacker can manipulate the method to remove arbitrary files, thus gaining access to execute code with SYSTEM-level permissions. This poses significant security risks to installations of the affected product, necessitating immediate attention from users to safeguard their systems.

References