CVE-2020-12463: High severity avira software updater vulnerability
Published May 5, 2020
·Updated
An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.
Affected Software
1 affected component
Avira Software Updater<2.0.6.27476
Event History
May 5, 2020
CVE Published
via MITRE·09:18 PM
Data Sourced
via MITRE·09:18 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Avira Software Updater vulnerability?
The vulnerability ID for this Avira Software Updater vulnerability is CVE-2020-12463.
2
What is the severity level of CVE-2020-12463?
The severity level of CVE-2020-12463 is high.
3
What is the affected software for CVE-2020-12463?
The affected software for CVE-2020-12463 is Avira Software Updater version 2.0.6.27476.
4
How does CVE-2020-12463 exploit the vulnerability?
CVE-2020-12463 exploits the vulnerability by improperly handling file hard links, allowing local users to take control of arbitrary files.
5
Is there a fix available for CVE-2020-12463?
Yes, a fix is available for CVE-2020-12463. It is recommended to update Avira Software Updater to version 2.0.6.27476 or later.