PT-2017-7898 · Avira · Avira Antivir

Publicado 2017-07-27 · Atualizado 2020-08-05 · CVE-2016-10402

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avira Antivirus engine versions prior to 8.3.36.60

Description The issue allows remote code execution as NT AUTHORITYSYSTEM. This is caused by an integer overflow and heap-based buffer underflow resulting from a section header with a very large relative virtual address in a PE file.

Recommendations For versions prior to 8.3.36.60, update to version 8.3.36.60 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-10402

Produtos afetados

Avira Antivir

Referências · 4

• https://bugs.chromium.org/p/project-zero/issues/detail?id=765 · Nota
• https://osv.dev/vulnerability/CVE-2016-10402 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-10402 · Nota de Segurança
• http://securityfocus.com/bid/84841 · Nota