1. CVE-Search
  2. CVE-2007-2974
ID CVE-2007-2974
Summary Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."
References
Vulnerable Configurations
  • cpe:2.3:a:avira:antivir:*:*:*:*:*:*:*:*
    cpe:2.3:a:avira:antivir:*:*:*:*:*:*:*:*
  • cpe:2.3:a:avira:av_pack:*:*:*:*:*:*:*:*
    cpe:2.3:a:avira:av_pack:*:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 16-10-2018 - 16:46)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 24187
bugtraq 20070528 n.runs-SA-2007.010 - Avira Antivir Antivirus LZH parsing Arbitrary Code Execution Advisory
confirm http://forum.antivir-pe.de/thread.php?threadid=22528
fulldisc 20070528 n.runs-SA-2007.010 - Avira Antivir Antivirus LZH parsing Arbitrary Code Execution Advisory
misc http://www.nruns.com/advisories/%5Bn.runs-SA-2007.010%5D%20-%20Avira%20Antivir%20Antivirus%20LZH%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
osvdb 36712
sectrack 1018131
secunia 25417
sreason 2764
vupen ADV-2007-1971
xf avira-antivir-lzh-bo(34551)
Last major update 16-10-2018 - 16:46
Published 01-06-2007 - 01:30
Last modified 16-10-2018 - 16:46
Back to Top