AVG Anti-virus avg7core.sys 0x5348E004 IOCTL Local Privilege Escalation

High Nessus Plugin ID 25706


The remote Windows host contains an application that is prone to a local privilege escalation vulnerability.


AVG Anti-Virus is installed on the remote Windows host.

The version of AVG Anti-Virus on the remote host includes a kernel mode service driver, avg7core.sys, that allows a local user to write arbitrary data to arbitrary addresses.


Upgrade to AVG 7.5 build 476, core service version, or later.

See Also


Plugin Details

Severity: High

ID: 25706

File Name: avg_avg7core_priv_escalation.nasl

Version: $Revision: 1.14 $

Type: local

Agent: windows

Family: Windows

Published: 2007/07/12

Modified: 2016/05/04

Dependencies: 10456, 13855

Risk Information

Risk Factor: High


Base Score: 7.2

Temporal Score: 6.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: false

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2007/07/12

Reference Information

CVE: CVE-2007-3777

BID: 24870

OSVDB: 37975