Avira AntiVir Personal Multiple Code Execution Vulnerabilities
BID:45807
Info
Avira AntiVir Personal Multiple Code Execution Vulnerabilities
| Bugtraq ID: | 45807 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 14 2011 12:00AM |
| Updated: | Jan 18 2011 10:11AM |
| Credit: | D.Elser |
| Vulnerable: |
AVIRA AntiVir Personal 0 |
| Not Vulnerable: |
AVIRA AntiVir Personal 9 AVIRA AntiVir Personal 10 |
Discussion
Avira AntiVir Personal Multiple Code Execution Vulnerabilities
Avira AntiVir Personal is prone to multiple code-execution vulnerabilities.
Successful exploits may allow an attacker to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will likely result in denial-of-service conditions.
Please note that these issues affect versions of the application that are no longer supported.
Avira AntiVir Personal is prone to multiple code-execution vulnerabilities.
Successful exploits may allow an attacker to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will likely result in denial-of-service conditions.
Please note that these issues affect versions of the application that are no longer supported.
Exploit / POC
Avira AntiVir Personal Multiple Code Execution Vulnerabilities
The following proof-of-concept and exploit are available:
The following proof-of-concept and exploit are available:
Solution / Fix
Avira AntiVir Personal Multiple Code Execution Vulnerabilities
Solution:
The issues are addressed in versions 9 and 10 (all editions). Please contact the vendor for more information.
Solution:
The issues are addressed in versions 9 and 10 (all editions). Please contact the vendor for more information.
References
Avira AntiVir Personal Multiple Code Execution Vulnerabilities
References:
References:
- Avira AntiVir Personal Homepage (AVIRA)