CVE-2019-11230

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename a critical product file (e.g., AvastSvc.exe), causing the product to fail to start on the next system restart.

• CWE-59

• http://www.mcerlane.co.uk/CVE-2019-11230/Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/109344Third Party Advisory
• http://www.mcerlane.co.uk/CVE-2019-11230/Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/109344Third Party Advisory

Published

Jul 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11223An Unrestricted File Upload Vulnerability in the SupportCand…
• CVE-2019-11224HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command …
• CVE-2019-11226CMS Made Simple 2.2.10 has XSS via the m1_name parameter in …
• CVE-2019-11228repo/setting.go in Gitea before 1.7.6 and 1.8.x before 1.8-R…
• CVE-2019-11229models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before…8.8
• CVE-2019-1123A remote code execution vulnerability exists in the way that…
• CVE-2019-11231An issue was discovered in GetSimple CMS through 3.3.15. ins…
• CVE-2019-11232EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to l…
• CVE-2019-11233EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to l…
• CVE-2019-11234FreeRADIUS before 3.0.19 does not prevent use of reflection …
• CVE-2019-11235FreeRADIUS before 3.0.19 mishandles the "each participant ve…
• CVE-2019-11236In the urllib3 library through 1.24.1 for Python, CRLF injec…