CVE-2024-7236

Name of the Vulnerable Software and Affected Versions AVG AntiVirus Free (affected versions not specified)

Description This issue allows local attackers to create a denial-of-service condition on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue. The specific flaw exists within the AVG Installer, where an attacker can abuse the update functionality to create a file by creating a symbolic link. This can be leveraged to create a persistent denial-of-service condition on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.