EUVD-2019-3074

Malware in sbrugna...

CVE-2019-11396

An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...

CVE-2020-9320

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security Gateway, Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and...

Design/Logic Flaw

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security Gateway, Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and...

CVE-2020-9320

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security Gateway, Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and...

PT-2020-20581 · Avira · Antivirus For Endpoint +7

Name of the Vulnerable Software and Affected Versions: Avira AV Engine versions prior to 8.3.54.138 Antivirus for Endpoint versions prior to 8.3.54.138 Antivirus for Small Business versions prior to 8.3.54.138 Exchange Security Gateway versions prior to 8.3.54.138 Internet Security Suite for...

CVE-2019-11396

An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...

CVE-2019-11396

CVE-2019-11396 affects Avira Free Security Suite 10. The issue involves permissive access rights on the SoftwareUpdater folder and its configuration, which are incompatible with privileged file manipulation performed by the product. An unprivileged user can create files (via abuse of SwuConfig.js...

CVE-2017-6417

CVE-2017-6417 is a local code-injection vulnerability in Avira products (Total Security Suite 15.0 and earlier, Optimization Suite 15.0 and earlier, Internet Security Suite 15.0 and earlier, Free Security Suite 15.0 and earlier) enabling a local attacker to bypass the vendors’ self-protection and...