EUVD-2005-3223

Malware in sbrugna...

CVE-2007-2973

Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed TAR archive...

CVE-2007-2974

The CVE-2007-2974 entry concerns Avira AntiVir Antivirus (pre-7.03.00.09). The vulnerability is a buffer overflow in the file parsing engine when handling LZH archives, caused by an integer cast around in the parsing path, enabling remote code execution. The connected NVD entry confirms impact to...

CVE-2007-2972: Undefined Security Weakness

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2973: Undefined Security Weakness

Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed TAR archive...

CVE-2007-2974: Undefined Security Weakness

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

n.runs-SA-2007.012 - Avira Antivir Antivirus TAR Denial of Service

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.012 30-May-2007 Vendor: Avira GmbH, http://www.avira.com Affected Product: Avira Antivir Antivirus Vulnerability: Infinity Loop DoS remote Risk: HIGH Vendor communication: 2007/05/07 initial notification to Avira GmbH 2007/05/07...

n.runs-SA-2007.011 - Avira Antivir Antivirus UPX parsing Divide by Zero Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.011 29-May-2007 Vendor: Avira GmbH, http://www.avira.com Affected Product: Avira Antivir Antivirus Vulnerability: Divide by Zero Engine DoS remote Risk: HIGH Vendor communication: 2007/05/07 initial notification to Avira GmbH...

[Full-disclosure] n.runs-SA-2007.010 - Avira Antivir Antivirus LZH parsing Arbitrary Code Execution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.010 28-May-2007 Vendor: Avira GmbH, http://www.avira.com Affected Product: Avira Antivir Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07 initial notification to Avira GmbH...

CVE-2005-3224: Undefined Security Weakness

Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...