CVE-2010-3498

AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2012-08-22

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Anti-virus (Avg)

References

• http://www.n00bz.net/antivirus-cve
• http://www.securityfocus.com/archive/1/514356