Back to Database
Status published
Medium
CVE-2006-1125
Grisoft AVG Free 7.1, and other versions including 7.0.308, sets...
Vulnerability Description
Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including (1) upd_vers.cfg, (2) incavi.avm, and (3) unspecified drivers, which might allow local users to gain privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-1125
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/16952
- http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html
- http://secunia.com/advisories/19118
- http://securitytracker.com/id?1015728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25139
- http://www.vupen.com/english/advisories/2006/0845
- http://www.dslreports.com/forum/remark%2C15601404
More from grisoft
View All →CVE-2008-3373
The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156...
Medium
5
CVE-2007-3777
avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition...
High
7.2
CVE-2006-5940
Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown...
Critical
10
CVE-2006-5939
Grisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause...
High
7.8
CVE-2006-5938
Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote...
Critical
10
Affected Vendor
grisoft
View all reports →Affected Software
avg antivirus
Vulnerable Versions:
7.0, 7.0.251, 7.0.323, 7.1.308
Timeline
Official Publish:
March 9th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.