Avira AntiVir Shatter Local Buffer Overflow Vulnerability

Bugtraq ID:	19843
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 04 2006 12:00AM
Updated:	Sep 14 2006 12:24AM
Credit:	rugginello has been credited with the discovery of this vulnerability.
Vulnerable:	AVIRA Antivir 6.35.00.00
Not Vulnerable:	AVIRA AntiVir Workstation Professional Build 367 AVIRA AntiVir PersonalEdition Premium Build 228 AVIRA AntiVir PersonalEdition Classic Build 180

Avira AntiVir Shatter Local Buffer Overflow Vulnerability

Avira AntiVir is prone to a buffer-overflow vulnerability because the application fails to bounds-check data before copying it into a finite-sized buffer.

Attackers can exploit this issue to execute arbitrary machine code with SYSTEM-level privileges, resulting in the complete compromise of affected computers. Failed exploit attempts may result in crashes, denying service to legitimate users.

Currently we are not aware of the specific versions that are vulnerable. This BID will be updated as soon as more information is available. The free version is known to be affected by this issue.

Avira AntiVir Shatter Local Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Avira AntiVir Shatter Local Buffer Overflow Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.

Avira AntiVir Shatter Local Buffer Overflow Vulnerability

References:

• Avira AntiVir Homepage (Avira)
  
• Anti-vir vulnerability ([email protected])