Detections
Analytics

AVG Anti-virus avg7core.sys 0x5348E004 IOCTL Local Privilege Escalation

high Nessus Plugin ID 25706

Synopsis

The remote Windows host contains an application that is prone to a local privilege escalation vulnerability.

Description

AVG Anti-Virus is installed on the remote Windows host.

The version of AVG Anti-Virus on the remote host includes a kernel mode service driver, avg7core.sys, that allows a local user to write arbitrary data to arbitrary addresses.

Solution

Upgrade to AVG 7.5 build 476, core service version 7.5.0.476, or later.

See Also

https://www.securityfocus.com/archive/1/473360/30/0/threaded

Plugin Details

Severity: High

ID: 25706

File Name: avg_avg7core_priv_escalation.nasl

Version: 1.16

Type: local

Agent: windows

Family: Windows

Published: 7/12/2007

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/12/2007

Reference Information

CVE: CVE-2007-3777

BID: 24870