Lucene search
MitreCVE-2009-1784HistoryMay 22, 2009 - 8:30 p.m.
CVE-2009-1784
2009-05-2220:30:00
CWE-20
mitre
web.nvd.nist.gov
34
avg
parsing engine
bypass
malware detection
vulnerability
cve-2009-1784
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0.007
Percentile
80.3%
The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.
Affected configurations
Node
avgavg_anti-virusRange≤8.0.156
ORavgavg_anti-virusMatch6.0.710
ORavgavg_anti-virusMatch7.0
ORavgavg_anti-virusMatch7.0.251
ORavgavg_anti-virusMatch7.0.323
ORavgavg_anti-virusMatch7.1.308
ORavgavg_anti-virusMatch7.1.407
ORavgavg_anti-virusMatch7.5.51
ORavgavg_anti-virusMatch7.5.448
ORavgavg_anti-virusMatch7.5.476
ORavgavg_anti-virusMatch8.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| avg | avg_anti-virus | * | cpe:2.3:a:avg:avg_anti-virus:*:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 6.0.710 | cpe:2.3:a:avg:avg_anti-virus:6.0.710:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.0 | cpe:2.3:a:avg:avg_anti-virus:7.0:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.0.251 | cpe:2.3:a:avg:avg_anti-virus:7.0.251:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.0.323 | cpe:2.3:a:avg:avg_anti-virus:7.0.323:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.1.308 | cpe:2.3:a:avg:avg_anti-virus:7.1.308:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.1.407 | cpe:2.3:a:avg:avg_anti-virus:7.1.407:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.5.51 | cpe:2.3:a:avg:avg_anti-virus:7.5.51:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.5.448 | cpe:2.3:a:avg:avg_anti-virus:7.5.448:*:*:*:*:*:*:* |
| avg | avg_anti-virus | 7.5.476 | cpe:2.3:a:avg:avg_anti-virus:7.5.476:*:*:*:*:*:*:* |
Related
openvas
openvas
AVG AntiVirus Engine Malware Detection Bypass Vulnerability (Linux)
2009-06-02 00:00:00
AVG AntiVirus Engine Malware Detection Bypass Vulnerability - Linux
2009-06-02 00:00:00
AVG AntiVirus Engine Malware Detection Bypass Vulnerability - Windows
2009-05-29 00:00:00
cvelist
cvelist
CVE-2009-1784
2009-05-22 20:00:00
kaspersky
kaspersky
KLA10050 SB vulnerability in AVG
2009-05-22 00:00:00
nvd
nvd
CVE-2009-1784
2009-05-22 20:30:00
prion
prion
Authentication flaw
2009-05-22 20:30:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0.007
Percentile
80.3%
Related for CVE-2009-1784