Avira Antivir Tar Archive Handling Remote Denial Of Service Vulnerability

Bugtraq ID:	24239
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-2973
Remote:	Yes
Local:	No
Published:	May 30 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	Sergio Alvarez of n.runs AG. is credited with discovering this issue.
Vulnerable:	AVIRA AntiVir Engine 0 AVIRA Antivir 6.35.00.00
Not Vulnerable:	AVIRA AntiVir AVPack 7.3 .09

Avira Antivir Tar Archive Handling Remote Denial Of Service Vulnerability

Avira Antivir is prone to a denial-of-service vulnerability because the application fails to handle certain TAR archives.

Remote attackers may exploit this issue by enticing victims into opening maliciously crafted TAR archives.

A successful attack may allow attackers to cause denial-of-service conditions.

Avira Antivir Tar Archive Handling Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Avira Antivir Tar Archive Handling Remote Denial Of Service Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.

Avira Antivir Tar Archive Handling Remote Denial Of Service Vulnerability

References:

• Avira AntiVir Homepage (Avira)
  
• n.runs-SA-2007.012 - Avira Antivir Antivirus TAR Denial of Service (n.runs AG)
  
• Avira AntiVir Vulnerabilities (Avira)