Local Privilege Escalation Vulnerability in Avast Free Antivirus
CVE-2024-7233

7.8HIGH

Key Information:

Vendor

Avast

Status
Free Antivirus
Vendor
CVE Published:
22 November 2024

What is CVE-2024-7233?

This vulnerability affects Avast Free Antivirus by enabling local attackers to escalate their privileges through the manipulation of symbolic links. When an attacker successfully executes low-privileged code on the target system, they can create a symbolic link that the Avast Service improperly handles, allowing them to delete a folder. This exploitation could potentially lead to executing arbitrary code with elevated SYSTEM privileges, posing a significant security risk.

References

https://www.zerodayinitiative.com/advisories/ZDI-24-1005/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-7233 : Local Privilege Escalation Vulnerability in Avast Free Antivirus