Search
Send enquiry

Month: September 2024

Vulnerability in AVG Internet Security (CVE-2024-6510)

Posted on by ds@cirosec.de
Search
Send enquiry
  • Advisories

Vulnerability in AVG Internet Security (CVE-2024-6510)

AVG Internet Security is an antivirus software marketed to consumers.

Bug
Timeline

CVE-2024-6510: Local Privilege Escalation

Local privilege escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM hijacking.

This was possible by using COM hijacking to execute code in the context of a trusted front-end process. The trust between the front end and the back end was then abused to load a DLL into a process running as SYSTEM, allowing an attacker to execute code as SYSTEM.

For CVE assignment we tried contacting AVG and security@nortonlifelock.com after the fixed release but got no response.

The vulnerability was acknowledged and fixed by AVG within three months.

CVSS Score
7.8 (CVSS v3) 

CVSS Vector String
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Version
Versions < 24.1

Fixed Version
24.1

Credits
Kolja Grassmann

Timeline

2023-11-15

Vendor and informed about the vulnerability via sec.report@avg.com

2023-11-22

Second attempt to contact the vendor via dach@avast.com

2023-11-27

Third attempt to contact the vendor via support@help.avg.com

2023-11-29

Initial response from support that they have escalated the issue internally

2024-01-03

Email from support stating that they want to address the issue now. However, the writeup on the vulnerability was automatically deleted in the meantime. We provided the details of the vulnerability again. The writeup was passed on internally.

2024-02-02

We asked for a status update, as the deadline according to our disclosure policy is approaching.

2024-02-05

Vendor provided us with a beta version in which the issue is patched.

2024-02-08

Vendor informed us that the issue should now be fixed in the release version 24.1.

Do you want to protect your systems? Feel free to get in touch with us.
Send Enquiry
Contact Details

Vulnerability in Overwolf (CVE-2024-7834)

Posted on by ne@cirosec.de
Search
Send enquiry
  • Advisories

Vulnerability in Overwolf (CVE-2024-7834)

Overwolf is a software that is used for managing mods of games with 45 million active users every month.

Bug
Timeline

CVE: CVE-2024-7834: Local Privilege Escalation

A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.

The vulnerability was acknowledged and fixed by Overwolf within 3 weeks. We want to thank Overwolf for their exemplary reaction to the vulnerability report.

CVSS Score
7.8 (CVSS v3) 

CVSS Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Version
Overwolf Version <250.1.1

Fixed Version
250.1.1

References
https://nvd.nist.gov/vuln/detail/CVE-2024-7834

Credits
Lukas Bühl

Timeline

2024-04-19

Overwolf Support contacted per e-mail to determine preferred way of disclosing the vulnerability

2024-04-24

Responsible Disclosure of the vulnerability per e-mail to the address stated by support

2024-04-24

Confirmation of reception by Overwolf

2024-05-05

Patch is published by Overwolf on the development channel

2024-05-06

Lukas Bühl tested the patch and informed Overwolf that the issue seems to be fixed

2024-06-13

Overwolf is asked whether a CVE may be registered through cirosec

2024-06-15

Overwolf confirms that the patch is now published

2024-07-04

Overwolf is contacted again, stating that we would be interested in registering a CVE which Overwolf agreed to

2024-09-04

Published

Do you want to protect your systems? Feel free to get in touch with us.
Send Enquiry
Contact Details
Search
Search