AVG Anti-virus avg7core.sys 0x5348E004 IOCTL Local Privilege Escalation

high Nessus Plugin ID 25706


The remote Windows host contains an application that is prone to a local privilege escalation vulnerability.


AVG Anti-Virus is installed on the remote Windows host.

The version of AVG Anti-Virus on the remote host includes a kernel mode service driver, avg7core.sys, that allows a local user to write arbitrary data to arbitrary addresses.


Upgrade to AVG 7.5 build 476, core service version, or later.

See Also


Plugin Details

Severity: High

ID: 25706

File Name: avg_avg7core_priv_escalation.nasl

Version: 1.16

Type: local

Agent: windows

Family: Windows

Published: 7/12/2007

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information


Risk Factor: Medium

Score: 5.9


Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/12/2007

Reference Information

CVE: CVE-2007-3777

BID: 24870