CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-13657
https://notcve.org/view.php?id=CVE-2020-13657
29 Jun 2020 — An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files. Se presenta una vulnerabilidad de elevación de privilegios en Avast Free Antivirus y AVG AntiVirus Free versiones anteriores a 20.4, debido a un manejo inapropiado de los enlaces físicos. La vulnerabilidad permite a usuarios locales tomar el control de archivos arbitrarios • https://forum.avast.com/index.php?topic=232423.0 •
CVSS: 5.5EPSS: 2%CPEs: 3EXPL: 0CVE-2008-3373
https://notcve.org/view.php?id=CVE-2008-3373
30 Jul 2008 — The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error. El motor del analizador sintáctico de archivos de Grisoft AVG Anti-Virus anterior 8.0.156, permite a atacantes remotos provocar una denegación de servicio (caída de motor) a través de un fichero UPX comprimido manipulado, que lanza un error "División por cero". • http://secunia.com/advisories/31290 • CWE-189: Numeric Errors •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2007-3777
https://notcve.org/view.php?id=CVE-2007-3777
15 Jul 2007 — avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler. avg7core.sys 7.5.0.444 en Grisoft AVG Anti-Virus 7.5.448 y Free Edition 7.5.446, proporciona una función interna que copia datos a una direción arbitraria, lo cual permite a usuarios locales ob... • http://osvdb.org/37975 •
CVSS: 8.8EPSS: 3%CPEs: 4EXPL: 0CVE-2006-5937
https://notcve.org/view.php?id=CVE-2006-5937
16 Nov 2006 — Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (2) RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information. Múltiples desbordamientos de búfer en Grisoft AVG Anti-Virus anterior a 7.1.407 permite a un atacante remoto ejecutar código a través de archivos (1)CAB o (2)RAR manipulados que disparan un desbordamiento de búfer basado en pila. NOTA: algun... • http://marc.info/?l=full-disclosure&m=116343152030074&w=2 • CWE-190: Integer Overflow or Wraparound •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2006-5938
https://notcve.org/view.php?id=CVE-2006-5938
16 Nov 2006 — Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB file. Grisoft AVG Anti-Virus anterior a 7.1.407 tiene un impacto desconocido y vectores de ataque remotos que afectan a una variable no inicializada y a un fichero CAB manipulado. • http://marc.info/?l=full-disclosure&m=116343152030074&w=2 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2006-5939
https://notcve.org/view.php?id=CVE-2006-5939
16 Nov 2006 — Grisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers a divide-by-zero error. NOTE: some of these details are obtained from third party information. Grisoft AVG Anti-Virus anterior a 7.1.407 permite a un atacante remoto provocar denegación de servicio (caida) a través de ficheros DOC manipulados que disparan un error division-por-cero. NOTA: algunos de estos detalles se obtuvieron de información de terceros. • http://marc.info/?l=full-disclosure&m=116343152030074&w=2 • CWE-369: Divide By Zero •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2006-5940
https://notcve.org/view.php?id=CVE-2006-5940
16 Nov 2006 — Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" and parsing of .EXE files. Vulnerabilidad no especificada en Grisoft AVG Anti-Virus anterior a 7.1.407 tiene un impacto desconocido y vectores remotos de ataque realciones con "asuntos de integer" y el análisis sintáctivo de los archivos .exe • http://marc.info/?l=full-disclosure&m=116343152030074&w=2 • CWE-189: Numeric Errors •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2006-1125
https://notcve.org/view.php?id=CVE-2006-1125
09 Mar 2006 — Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including (1) upd_vers.cfg, (2) incavi.avm, and (3) unspecified drivers, which might allow local users to gain privileges. • http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2005-3371
https://notcve.org/view.php?id=CVE-2005-3371
29 Oct 2005 — Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug." • http://marc.info/?l=bugtraq&m=113026417802703&w=2 •