Fortinet Discovers AVG Self-protection Bypass by disabling AV update
When performing AV's update, AVG is reading some legacy registry entry that could lead to AVG file path hijacking, which could in turn allows adversaries to disable AV auto-update
AVG's users should apply latest updates from the vendor
Following products and versions are affected.
AVG Free Edition 16.101.7752 and below
This vulnerability was discovered by Wayne Low of Fortinet's FortiGuard Labs.