PT-2017-7898 · Avira · Avira Antivir

Published 2017-07-27 · Updated 2020-08-05 · CVE-2016-10402

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Avira Antivirus engine versions prior to 8.3.36.60

Description The issue allows remote code execution as NT AUTHORITYSYSTEM. This is caused by an integer overflow and heap-based buffer underflow resulting from a section header with a very large relative virtual address in a PE file.

Recommendations For versions prior to 8.3.36.60, update to version 8.3.36.60 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-10402

Affected Products

Avira Antivir

References · 4

• https://osv.dev/vulnerability/CVE-2016-10402 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10402 · Security Note
• https://bugs.chromium.org/p/project-zero/issues/detail?id=765 · Note
• http://securityfocus.com/bid/84841 · Note