ZDI-CAN-25498: ZDI-25-697: AVG TuneUp for PC TuneupSvc Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of AVG TuneUp for PC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-13959.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25498?
The severity of ZDI-CAN-25498 is significant as it allows local privilege escalation on vulnerable versions of AVG TuneUp for PC.
How do I fix ZDI-CAN-25498?
To fix ZDI-CAN-25498, users should update AVG TuneUp for PC to the latest version that addresses this vulnerability.
Who is affected by ZDI-CAN-25498?
ZDI-CAN-25498 affects users of AVG TuneUp for PC who have not applied the latest security updates.
What type of attack does ZDI-CAN-25498 involve?
ZDI-CAN-25498 involves local attacks where an attacker must execute low-privileged code to exploit the vulnerability.
Is there a workaround for ZDI-CAN-25498?
Currently, the recommended action for ZDI-CAN-25498 is to apply the available security updates rather than relying on a workaround.