[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOj7ij5BE7BTQqzhOVJ-cE_kCWND8walcnhBU0maHHI0":3,"g5a-risk:CVE-2017-8307":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":66,"weaknesses":67,"weaknessesCount":48,"isActivelyExploited":71,"cisaInfo":15,"otxData":15,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":107,"notableEvents":108},"CVE-2017-8307","What is CVE-2017-8307?","In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled. It is also exploitable in conjunction with CVE-2017-8308 when Avast Self-Defense is enabled. The vulnerability allows for Denial of Service attacks and hiding traces of a possible attack.","In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or repl...","2017-04-27T20:59:00.167","2025-04-20T01:37:25.86",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01781,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"avast","antivirus","*","cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*",1,[50,56,62,64],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F98086","Securityfocus",[54,55],"Third Party Advisory","VDB Entry",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.trustwave.com\u002FResources\u002FSecurity-Advisories\u002FAdvisories\u002FMultiple-Vulnerabilities-in-Avast-Antivirus\u002F?fid=9201","Trustwave",[60,61,54],"Exploit","Technical Description",{"url":51,"source":52,"tags":63},[54,55],{"url":57,"source":58,"tags":65},[60,61,54],4,[68],{"id":69,"name":69,"description":70},"Unknown","NVD-CWE-noinfo",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2017-8307? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-8307, a critical severity cyber security vulnerability from 2017. In Avast Antivirus before v17, using the LPC interface A...","CVE-2017-8307, CVE-2017-8307 vulnerability, CVE-2017-8307 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, avast security, antivirus vulnerability","\u002Fwhat-is\u002Fcve-2017-8307",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-8307","Cybersecurity","CVE-2017-8307, CVE-2017-8307 vulnerability, CVE-2017-8307 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":15,"Negate":15,"Nodes":100},[101],{"Operator":102,"Negate":15,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":105,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":106},"54ED80B2-E917-49FA-9FD8-C6010E8CBA5B","12.3.2279",[],[],{"lastModified":11,"cacheTime":110,"version":33},1792375237955,{"score":112,"band":113,"action":114,"scoredAt":115},54,"Medium","Plan remediation","2026-10-17T08:32:26.83599+00:00"]