RETIRED: Avira Secure Backup CVE-2013-6356 Local Buffer Overflow Vulnerability

Bugtraq ID:	63765
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 18 2013 12:00AM
Updated:	Dec 12 2013 05:28AM
Credit:	Julien Ahrens from RCE Security.
Vulnerable:
Not Vulnerable:

RETIRED: Avira Secure Backup CVE-2013-6356 Local Buffer Overflow Vulnerability

Avira Secure Backup is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Note: Further analysis reveals that is issue is not a vulnerability; therefore this BID is being retired.

Avira Secure Backup 1.0.0.2.3630 is vulnerable; other versions may also be affected.

RETIRED: Avira Secure Backup CVE-2013-6356 Local Buffer Overflow Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

RETIRED: Avira Secure Backup CVE-2013-6356 Local Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Avira Secure Backup CVE-2013-6356 Local Buffer Overflow Vulnerability

References: