KLA10063 ACE vulnerability in Avira

A nonsecure function call vulnerability was found in Avira. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to the scheduler via a specially designed *.exe file.

Original advisories

detailed description

Related products

Avira-AntiVir-Professional-(formerly-Workstation)

Avira-Premium-Security-Suite

CVE list

CVE-2009-2761 high

Solution

Update to latest version

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Avira Antivr versions 8.x and earlierAvira AntiVir Premium versions 8.x and earlierAvira Premium Security Suite versions 8.x and earlierAvira AntiVir Professional versions 8.x and earlier