cve/2023/CVE-2023-1585.md

### [CVE-2023-1585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1585)
![](https://img.shields.io/static/v1?label=Product&message=AVG%20Antivirus&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Avast%20Antivirus&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=22.5%3C%3D%2022.10%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-367%20Time-of-check%20Time-of-use%20(TOCTOU)%20Race%20Condition&color=brighgreen)

### Description

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU)  vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.  

### POC

#### Reference
- https://support.norton.com/sp/static/external/tools/security-advisories.html

#### Github
No PoCs found on GitHub currently.