CVE-2010-3498 - CVE House
Back to Database
Status published Medium CVE-2010-3498

AVG Anti-Virus does not properly interact with the processing of...

Vulnerability Description

AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-3498

Credits & Attribution

No credits recorded in the NVD database.

References

More from avg

View All →
CVE-2019-18654
A Cross Site Scripting (XSS) issue exists in AVG AntiVirus...
Medium 6.1
CVE-2017-9977
AVG AntiVirus for MacOS with scan engine before 4668 might...
High 7.5
CVE-2017-5566
Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG...
Medium 6.7
CVE-2015-8578
AVG Internet Security 2015 allocates memory with Read, Write, Execute...
Medium 6.4
CVE-2014-9632
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495...
High 7.2

Affected Vendor

Affected Software

anti-virus
Vulnerable Versions:
Unknown

Timeline

Official Publish: August 22nd, 2012
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.