CVE-2009-1784

2009-05-2220:30:00

CWE-20

[email protected]

web.nvd.nist.gov

avg

parsing engine

bypass

malware detection

vulnerability

cve-2009-1784

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.

Affected configurations

NVD

Node

avgavg_anti-virusRange≤8.0.156

avgavg_anti-virusMatch6.0.710

avgavg_anti-virusMatch7.0

avgavg_anti-virusMatch7.0.251

avgavg_anti-virusMatch7.0.323

avgavg_anti-virusMatch7.1.308

avgavg_anti-virusMatch7.1.407

avgavg_anti-virusMatch7.5.51

avgavg_anti-virusMatch7.5.448

avgavg_anti-virusMatch7.5.476

avgavg_anti-virusMatch8.0

CPENameOperatorVersion
avg:avg_anti-virusavg avg anti-virusle8.0.156
avg:avg_anti-virusavg avg anti-viruseq6.0.710
avg:avg_anti-virusavg avg anti-viruseq7.0
avg:avg_anti-virusavg avg anti-viruseq7.0.251
avg:avg_anti-virusavg avg anti-viruseq7.0.323
avg:avg_anti-virusavg avg anti-viruseq7.1.308
avg:avg_anti-virusavg avg anti-viruseq7.1.407
avg:avg_anti-virusavg avg anti-viruseq7.5.51
avg:avg_anti-virusavg avg anti-viruseq7.5.448
avg:avg_anti-virusavg avg anti-viruseq7.5.476

CPE	Name	Operator	Version
avg:avg_anti-virus	avg avg anti-virus	le	8.0.156
avg:avg_anti-virus	avg avg anti-virus	eq	6.0.710
avg:avg_anti-virus	avg avg anti-virus	eq	7.0
avg:avg_anti-virus	avg avg anti-virus	eq	7.0.251
avg:avg_anti-virus	avg avg anti-virus	eq	7.0.323
avg:avg_anti-virus	avg avg anti-virus	eq	7.1.308
avg:avg_anti-virus	avg avg anti-virus	eq	7.1.407
avg:avg_anti-virus	avg avg anti-virus	eq	7.5.51
avg:avg_anti-virus	avg avg anti-virus	eq	7.5.448
avg:avg_anti-virus	avg avg anti-virus	eq	7.5.476