Code injection

avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1672

avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1672

avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-1672

The CVE-2007-1672 issue affects Avast! antivirus prior to 4.7.981, where processing a ZOO archive with a direntry that points to a previous file can trigger an infinite loop DoS. The underlying cause is a faulty traversal of ZOO directory entries allowing repeated processing of the same data. Pub...

Avast! Antivirus服务器版口令设置绕过安全限制漏洞

Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast! Antivirus处理用户认证时存在访问验证漏洞，即使已经设置了口令的话，Avast! Antivirus服务器版也可能允许本地用户无需输入口令便更改某些配置。 ALWIL Software Avast! Antivirus Server Edition 4.7.676 ALWIL Software Avast! Antivirus Server Edition 4.7.660 ALWIL Software Avast! Antivirus Server Edition 4.6.566 ALWIL...

CVE-2007-0829

avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has been set, which allows local users to bypass authentication requirements...

Authentication flaw

avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has been set, which allows local users to bypass authentication requirements...

CVE-2007-0829

avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has been set, which allows local users to bypass authentication requirements...

CVE-2007-0829

CVE-2007-0829 affects avast! Server Edition prior to 4.7.726. The vulnerability is an authentication bypass where the product does not require a password in a particular intended context, allowing local users to bypass authentication requirements. The exploitation is local and results in partial ...

avast! Server Edition LHA Archive Extended-header Field Processing Overflow

The remote host is running avast! Server Edition. The installed version of avast! Server Edition is reportedly prone to a heap overflow when processing LHA archives with long filename and directory-name extended-header fields. An attacker may be able to exploit this issue to execute arbitrary cod...

avast! Antivirus Server Edition Password Setting Weakness

The remote host is running avast! Antivirus Server Edition. The installed version of this software reportedly does not ask for a password even if one is set. A local attacker may be able to leverage this issue to bypass authentication and manipulate settings of the affected application. C Tenable...

Multiple Vendor Unusual MIME Encoding Content Filter Bypass

Several e-mail virus scanners can be tricked into passing an EICAR test file if the following conditions are met: 1. the EICAR file is encoded in Base64 including characters not in the standard alphabet e.g. whitespaces and 2. the part containing the EICAR file is nested within one or several...

Alvila Avast! antivirus buffer overflow

Buffer overflow on LHA archives parsing...

CVE-2006-4626

Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow...

CVE-2006-4626

CVE-2006-4626 affects avast! Anti-virus Engine (and avast! Server Edition in Nessus entry) prior to version 4.7.869. The issue is a heap-based buffer overflow triggered when processing LHA archives with extended-header fields (long filenames/directories) whose concatenation overflows a buffer, al...

CVE-2006-4626

Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow...

CVE-2006-2869

Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors...

Code injection

Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors...

CVE-2006-2869

Technical details for CVE-2006-2869 are not publicly disclosed in the provided documents. The materials summarize an unspecified vulnerability in Avast CHM unpacker without concrete affected versions or impact. Monitor for updates from authoritative sources.

CVE-2006-2869

Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors...