CVEvulnerability
CVE-2020-13657
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-06-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files.
Affected configurations
• avast avg antivirus (< 20.4)
• avast free antivirus (< 20.4)
References
- https://forum.avast.com/index.php?topic=232423.0 Release Notes, Vendor Advisory
- https://forum.avast.com/index.php?topic=234638.0 Vendor Advisory
- https://forum.avast.com/index.php?topic=232423.0 Release Notes, Vendor Advisory
- https://forum.avast.com/index.php?topic=234638.0 Vendor Advisory