CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-13657
https://notcve.org/view.php?id=CVE-2020-13657
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files. Se presenta una vulnerabilidad de elevación de privilegios en Avast Free Antivirus y AVG AntiVirus Free versiones anteriores a 20.4, debido a un manejo inapropiado de los enlaces físicos. La vulnerabilidad permite a usuarios locales tomar el control de archivos arbitrarios • https://forum.avast.com/index.php?topic=232423.0 https://forum.avast.com/index.php?topic=234638.0 •
CVSS: 5.0EPSS: 4%CPEs: 3EXPL: 0CVE-2008-3373
https://notcve.org/view.php?id=CVE-2008-3373
The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error. El motor del analizador sintáctico de archivos de Grisoft AVG Anti-Virus anterior 8.0.156, permite a atacantes remotos provocar una denegación de servicio (caída de motor) a través de un fichero UPX comprimido manipulado, que lanza un error "División por cero". • http://secunia.com/advisories/31290 http://www.grisoft.com/ww.94247 http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt http://www.securityfocus.com/archive/1/494867/100/0/threaded http://www.securityfocus.com/bid/30417 http://www.securitytracker.com/id?1020570 http://www.vupen.com/english/advisories/2008/2225/references https://exchange.xforce.ibmcloud.com/vulnerabilities/44057 • CWE-189: Numeric Errors •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2007-3777
https://notcve.org/view.php?id=CVE-2007-3777
avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that copies data to an arbitrary address, which allows local users to gain privileges via arbitrary address arguments to a function provided by the 0x5348E004 IOCTL for the generic DeviceIoControl handler. avg7core.sys 7.5.0.444 en Grisoft AVG Anti-Virus 7.5.448 y Free Edition 7.5.446, proporciona una función interna que copia datos a una direción arbitraria, lo cual permite a usuarios locales obtener privilegios mediante argumentos de dirección arbitrarios para una función proporcionada por la llamada IOCTL 0x5348E004 al manejador DeviceIoControl. • http://osvdb.org/37975 http://secunia.com/advisories/25998 http://securityreason.com/securityalert/2887 http://securitytracker.com/id?1018362 http://www.securityfocus.com/archive/1/473360/100/0/threaded http://www.securityfocus.com/bid/24870 http://www.vupen.com/english/advisories/2007/2518 https://exchange.xforce.ibmcloud.com/vulnerabilities/35345 •