Priority HIGH 65
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99992 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Co…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.99854 · Published 2012-03-21 · No fix listed CWE-264
Priority HIGH 65
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.9998 · Published 2012-03-21 · No fix listed CWE-264
Priority MEDIUM 46
Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01707 · Published 2006-06-06 · No fix listed
Priority MEDIUM 41
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose conc…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04786 · Published 2006-09-07 · No fix listed
Priority MEDIUM 40
Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04035 · Published 2005-07-27 · No fix listed
Priority LOW 36
Unknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain viruses.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01424 · Published 2005-05-24 · No fix listed
Priority LOW 33
Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals com…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00677 · Published 2005-05-31 · No fix listed CWE-119
Priority LOW 32
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00387 · Published 2006-03-22 · No fix listed
Priority LOW 29
Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary f…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03487 · Published 2005-07-27 · No fix listed
Priority LOW 27
Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local heade…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.01723 · Published 2005-10-14 · No fix listed
Priority LOW 23
avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary directory.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.005 · Published 2006-04-20 · No fix listed
Priority LOW 20
avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has been set, which allows local users to bypass authentication requirements.
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00338 · Published 2007-02-07 · No fix listed