Executive Summary

This vulnerability is a heap buffer out-of-bounds write in Avast Antivirus products when scanning a malformed Windows PE file. It occurs because the antivirus scanning logic improperly handles certain malformed files, leading to writing data outside the allocated memory buffer.

This flaw may allow a local attacker to execute code with the privileges of the antivirus process or cause a denial-of-service by crashing the antivirus software.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by allowing an attacker with local access to your system to execute arbitrary code within the context of the antivirus process. This could lead to unauthorized actions on your system.

Alternatively, the attacker could cause a denial-of-service condition by crashing the antivirus process, potentially leaving your system unprotected against malware.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that your Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, or Avast Business Antivirus installations are updated to virus definition build VPS 25040308 or later.

Installations at or above this build are not vulnerable regardless of which product consumes the virus definition update stream.

Useful 0 Not Useful 0