10

CVE-2009-1784

The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Avg ≫ Avg Anti-virus Version <= 8.0.156
Avg ≫ Avg Anti-virus Version 6.0.710
Avg ≫ Avg Anti-virus Version 7.0
Avg ≫ Avg Anti-virus Version 7.0.251
Avg ≫ Avg Anti-virus Version 7.0.323
Avg ≫ Avg Anti-virus Version 7.1.308
Avg ≫ Avg Anti-virus Version 7.1.407
Avg ≫ Avg Anti-virus Version 7.5.51
Avg ≫ Avg Anti-virus Version 7.5.448
Avg ≫ Avg Anti-virus Version 7.5.476
Avg ≫ Avg Anti-virus Version 8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.41% 0.873
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html
http://www.securityfocus.com/archive/1/503392/100/0/threaded
http://www.securityfocus.com/bid/34895
https://exchange.xforce.ibmcloud.com/vulnerabilities/50426