CVE-2024-7236
CVSS 3.0 Score 5.3 of 10 (medium)
Details
Published Nov 22, 2024
CWE ID 59
Summary
CVE-2024-7236 is a Denial of Service (DoS) vulnerability affecting AVG AntiVirus Free. This issue enables local attackers to create a DoS condition by exploiting a flaw in the AVG Installer. By manipulating symbolic links and abusing the update functionality, attackers can generate a persistent DoS condition on the system. However, it's important to note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability, which was identified as ZDI-CAN-22942.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share