Description (CNA)
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Canimaan Software / ClamXAV | affected 3.3 before 3.11.1; unaffected 3.11.1 |
CWE
CWE-362