CVE-2006-1125 : Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full C

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including (1) upd_vers.cfg, (2) incavi.avm, and (3) unspecified drivers, which might allow local users to gain privileges.

Published 2006-03-09 21:02:00

Updated 2017-07-20 01:30:20

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-1125

Grisoft » Avg Antivirus » Version: 7.0.323
cpe:2.3:a:grisoft:avg_antivirus:7.0.323:*:*:*:*:*:*:*
Matching versions
Grisoft » Avg Antivirus » Version: 7.0.251
cpe:2.3:a:grisoft:avg_antivirus:7.0.251:*:*:*:*:*:*:*
Matching versions
Grisoft » Avg Antivirus » Version: 7.1.308
cpe:2.3:a:grisoft:avg_antivirus:7.1.308:*:*:*:*:*:*:*
Matching versions
Grisoft » Avg Antivirus » Version: 7.0
cpe:2.3:a:grisoft:avg_antivirus:7.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-1125

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 24 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-1125

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-1125

Jump to

Vulnerability Details : CVE-2006-1125

Products affected by CVE-2006-1125

Exploit prediction scoring system (EPSS) score for CVE-2006-1125

CVSS scores for CVE-2006-1125

References for CVE-2006-1125