Avira AntiVir PDF Scan Evasion

The remote host is running an Avira AntiVir product. The scan engine of the installed product is earlier than 7.9.0.168 / 8.2.0.168. Such versions reportedly fail to properly inspect specially crafted 'PDF' files. An attacker could embed code in a PDF file in order to circumvent detection by...

Avira AntiVir Zip Scan Evasion

The remote host is running an Avira AntiVir product. The scan engine of the installed product is earlier than 7.9.0.148 / 8.2.0.148. Such versions reportedly fail to properly inspect specially crafted 'ZIP' files. An attacker could embed code in a ZIP file in order to circumvent detection by...

Avira产品RAR文件处理拒绝服务漏洞

BUGTRAQ ID: 33270 Avira AntiVir中文名为小红伞，是一款德国的杀毒软件。 如果用户受骗打开的RAR文档包含有恶意字段的话，则Avira杀毒软件在扫描该文档时就会触发空指针引用或将0用作除数，导致扫描进程崩溃。 AVIRA AntiVir 8.x AVIRA AntiVir 7.x AVIRA ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://forum.avira.com/wbb/index.php?page=Thread&threadID=81148...

Avira Antivir multiple security vulnerabilities

Multiple DoS conditions and privilege escalations...

Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference

Errata : Products listed but not affected : AVIRA WebProtector for KEN! - Reason: Does not use the Scan Engine Avira AntiVir Mobile - Reason: Does not use the same AV Engine Avira requested the following products to be removed from the list, for the reason that they are license models and not...

[TZO-2009-2] Avira Antivir - Priviledge escalation

From the 'cover-your-basics' and from the 'they-still-exist-department' Antivir insecure CreateProcess usage - Privilege Esclation and autostart as free bonus Reference : TZO-2009-2-Avira Antivir Priviledge escalation WWW : http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html...

CVE-2008-5521

Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .j...

Design/Logic Flaw

Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .j...

CVE-2008-5521

The CVE-2008-5521 issue affects Avira AntiVir versions 7.9.0.36 and possibly 7.8.1.28. When Internet Explorer 6 or 7 is used, an attacker can bypass malware detection in HTML documents by placing an MZ header (the “EXE info”) at the start and altering the document’s filename to have no extension,...

CVE-2008-5521

Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .j...

KLA10063 ACE vulnerability in Avira

A nonsecure function call vulnerability was found in Avira. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to the scheduler via a specially designed .exe file. Original advisories detailed description...

AXIMilter Detection

The remote service is an AXIGEN milter filtering daemon, also known as AXIMilter, which is used by AXIGEN to interface with third-party milters such as Avira MailGate, Symantec Brightmail AntiSpam, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Avira Antivir Tar档处理远程拒绝服务漏洞

Avira Antivir是一款反病毒应用程序。 Avira Antivir处理TAR档存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的.tar文件，当应用程序处理时可导致无限循环，消耗大量资源而造成拒绝服务攻击。目前没有详细漏洞细节提供。 AVIRA AntiVir Engine 0 AVIRA Antivir 6.35.00.00 升级到最新程序Avira Antivir Antivirus 7.03.00.09： http://forum.antivir-pe.de/thread.php?threadid=22528...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2973

Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed TAR archive...

Design/Logic Flaw

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2974

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

Buffer overflow

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

Code injection

Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed TAR archive...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...