writeups.xyz / Avast Anti-Virus privileged arbitrary file create on virus restore (CVE-2023-1586)

Submitter : c2a

Date: 15 May 2023

Bounty : undisclosed

Vulnerabilities :

• TOCTOU
• Arbitrary File Write
• Local Privilege Escalation

Programs :

• Avast
• NortonLifeLock

Authors :

• Denis Skvortcov (@Denis_Skvortcov)

Link :
https://the-deniss.github.io/posts/avast-privileged-arbitrary-file-create-on-restore/