CyberRota Analysis
AI-GeneratedClamXAV versions 3.3 to 3.11 are vulnerable to a local privilege escalation due to a race condition and inadequate file validation in the Privileged Helper Tool, enabling local attackers to execute arbitrary code with elevated system privileges. Organizations using affected versions should prioritize updating to version 3.11.1 to mitigate the risk of exploitation. This vulnerability poses a significant threat to system integrity and should be addressed promptly by users of the software.
Original NVD Description
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1.