writeups.xyz / Avast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587)

Submitter : c2a

Date: 26 April 2023

Bounty : undisclosed

Vulnerabilities :

• TOCTOU
• NULL Pointer Dereference
• Arbitrary File Write
• Local Privilege Escalation

Programs :

• Avast

Authors :

• Denis Skvortcov (@Denis_Skvortcov)

Link :
https://the-deniss.github.io/posts/2023/04/26/avast-privileged-arbitrary-file-create-on-quarantine.html