Vulnerabilities > Avast > Premier > High

DATE CVE VULNERABILITY TITLE RISK
2017-03-21 CVE-2017-5567 Uncontrolled Search Path Element vulnerability in Avast products
Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process via a "DoubleAgent" attack.
local
low complexity
avast CWE-427
7.2