CVE-2009-1784

The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:avg:avg_anti-virus:*:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:6.0.710:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.0:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.0.251:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.0.323:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.1.308:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.1.407:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.5.51:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.5.448:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:7.5.476:*:*:*:*:*:*:*
cpe:2.3:a:avg:avg_anti-virus:8.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:03

Type Values Removed Values Added
References () http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html - () http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html -
References () http://www.securityfocus.com/archive/1/503392/100/0/threaded - () http://www.securityfocus.com/archive/1/503392/100/0/threaded -
References () http://www.securityfocus.com/bid/34895 - () http://www.securityfocus.com/bid/34895 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/50426 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/50426 -

Information

Published : 2009-05-22 20:30

Updated : 2024-11-21 01:03


NVD link : CVE-2009-1784

Mitre link : CVE-2009-1784

CVE.ORG link : CVE-2009-1784


JSON object : View

Products Affected

avg

  • avg_anti-virus
CWE
CWE-20

Improper Input Validation