CVE-2008-6962

EPSS 0.65%
Veröffentlicht 13.08.2009 16:30:00
Zuletzt bearbeitet 16.06.2026 23:03:19
Erkennungen
Login

Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Avira ≫ Antivir Version - Update - Edition premium

Avira ≫ Antivir Version 6.35.00.00

Avira ≫ Antivir Personal

Avira ≫ Antivir Personal Edition premium

Avira ≫ Antivir Professional

Avira ≫ Antivir Security Suite Version - Update - Edition premium

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.65%	0.464

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/32269

http://www.vupen.com/english/VUPEN-Security-Advisory-20081112.txt

Vendor Advisory

http://www.vupen.com/english/advisories/2008/3130

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46567

https://nvd.nist.gov/vuln/detail/CVE-2008-6962

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-6962

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-6962

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-6962