Lucene search

MitreCVE-2013-4602

HistoryFeb 12, 2020 - 10:15 p.m.

CVE-2013-4602

2020-02-1222:15:12

CWE-400

mitre

web.nvd.nist.gov

cve

2013

4602

denial of service

avira antivir

pdf scanner engine

nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

45.8%

JSON

A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.

Affected configurations

Nvd

Node

aviraantivir_mailgateRange<8.2.12.58

aviraantivir_mailgate_suiteRange<8.2.12.58

aviraantivir_personalRange<8.2.12.58

aviraantivir_sharepointRange<8.2.12.58

aviraantivir_webgateRange<8.2.12.58

aviraantivir_webgate_suiteRange<8.2.12.58

aviraantivirus_serverRange<8.2.12.58

aviraexchange_securityRange<8.2.12.58

aviraprofessional_securityRange<8.2.12.58

avirasavapiRange<8.2.12.58

VendorProductVersionCPE
aviraantivir_mailgate*cpe:2.3:a:avira:antivir_mailgate:*:*:*:*:*:*:*:*
aviraantivir_mailgate_suite*cpe:2.3:a:avira:antivir_mailgate_suite:*:*:*:*:*:*:*:*
aviraantivir_personal*cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*
aviraantivir_sharepoint*cpe:2.3:a:avira:antivir_sharepoint:*:*:*:*:*:*:*:*
aviraantivir_webgate*cpe:2.3:a:avira:antivir_webgate:*:*:*:*:*:*:*:*
aviraantivir_webgate_suite*cpe:2.3:a:avira:antivir_webgate_suite:*:*:*:*:*:*:*:*
aviraantivirus_server*cpe:2.3:a:avira:antivirus_server:*:*:*:*:*:*:*:*
aviraexchange_security*cpe:2.3:a:avira:exchange_security:*:*:*:*:*:*:*:*
aviraprofessional_security*cpe:2.3:a:avira:professional_security:*:*:*:*:*:*:*:*
avirasavapi*cpe:2.3:a:avira:savapi:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
avira	antivir_mailgate	*	cpe:2.3:a:avira:antivir_mailgate::::::::
avira	antivir_mailgate_suite	*	cpe:2.3:a:avira:antivir_mailgate_suite::::::::
avira	antivir_personal	*	cpe:2.3:a:avira:antivir_personal::::::::
avira	antivir_sharepoint	*	cpe:2.3:a:avira:antivir_sharepoint::::::::
avira	antivir_webgate	*	cpe:2.3:a:avira:antivir_webgate::::::::
avira	antivir_webgate_suite	*	cpe:2.3:a:avira:antivir_webgate_suite::::::::
avira	antivirus_server	*	cpe:2.3:a:avira:antivirus_server::::::::
avira	exchange_security	*	cpe:2.3:a:avira:exchange_security::::::::
avira	professional_security	*	cpe:2.3:a:avira:professional_security::::::::
avira	savapi	*	cpe:2.3:a:avira:savapi::::::::

References

www.securityfocus.com/bid/60552

www.securitytracker.com/id/1028666

exchange.xforce.ibmcloud.com/vulnerabilities/85099

packetstormsecurity.com/files/122024/Avira-AntiVir-Engine-Denial-Of-Service-Filter-Evasion.html

vuldb.com/?id.9151

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

45.8%

JSON

Related for CVE-2013-4602