ZDI-CAN-25548: ZDI-25-698: Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-13962.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25548?
The severity of ZDI-CAN-25548 is determined by its potential to allow local attackers to escalate privileges on affected installations of Avast Cleanup Premium.
How do I fix ZDI-CAN-25548?
To fix ZDI-CAN-25548, ensure that you have the latest version of Avast Cleanup Premium installed, as updates often address known vulnerabilities.
Who is affected by ZDI-CAN-25548?
Users of Avast Cleanup Premium are affected by ZDI-CAN-25548 if they are running unpatched versions of the software.
What should I do if I cannot update Avast Cleanup Premium to resolve ZDI-CAN-25548?
If you cannot update Avast Cleanup Premium, consider uninstalling the program or restricting access to the system to mitigate potential exploitation of ZDI-CAN-25548.
Can ZDI-CAN-25548 be exploited remotely?
No, ZDI-CAN-25548 cannot be exploited remotely; an attacker must have low-privileged access to execute code on the target system.