CVE-2013-4602

A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.

CVSS v3 5.5 MEDIUM
CVSS v2.0 7.1 HIGH

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.1^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 8.6 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/60552	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1028666	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/85099	Third Party Advisory VDB Entry
https://packetstormsecurity.com/files/122024/Avira-AntiVir-Engine-Denial-Of-Service-Filter-Evasion.html	Third Party Advisory VDB Entry
https://vuldb.com/?id.9151	Permissions Required Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:avira:antivir_mailgate::::::::
	cpe:2.3:a:avira:antivir_mailgate_suite::::::::
	cpe:2.3:a:avira:antivir_personal::::::::
	cpe:2.3:a:avira:antivir_sharepoint::::::::
	cpe:2.3:a:avira:antivir_webgate::::::::
	cpe:2.3:a:avira:antivir_webgate_suite::::::::
	cpe:2.3:a:avira:antivirus_server::::::::
	cpe:2.3:a:avira:exchange_security::::::::
	cpe:2.3:a:avira:professional_security::::::::
	cpe:2.3:a:avira:savapi::::::::

History

No history.

Information

Published : 2020-02-12 22:15

Updated : 2024-02-28 17:28

NVD link : CVE-2013-4602

Mitre link : CVE-2013-4602

CVE.ORG link : CVE-2013-4602

JSON object : View

Products Affected

avira

savapi
antivir_webgate
antivirus_server
professional_security
antivir_mailgate_suite
antivir_webgate_suite
antivir_mailgate
exchange_security
antivir_sharepoint
antivir_personal

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2013-4602", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2020-02-12T22:15:12.550", "references": [{"url": "http://www.securityfocus.com/bid/60552", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1028666", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85099", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://packetstormsecurity.com/files/122024/Avira-AntiVir-Engine-Denial-Of-Service-Filter-Evasion.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://vuldb.com/?id.9151", "tags": ["Permissions Required", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de denegaci\u00f3n de servicio (bucle infinito) en Avira AntiVir Engine versiones anteriores a 8.2.12.58, por medio de una funci\u00f3n no especificada en el PDF Scanner Engine."}], "lastModified": "2020-02-18T19:10:07.460", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:avira:antivir_mailgate:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B1B2ACA-E86D-486B-90CC-AFAEA1984953", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:antivir_mailgate_suite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F1B54AF-0981-49FE-9DE4-BB9D37B16900", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:antivir_personal:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BDC1E0B-5D6F-407F-88CA-2E1521A7B3F2", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:antivir_sharepoint:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0344C9ED-261F-4E19-8645-28422B4DC9F7", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:antivir_webgate:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5715AE53-CD49-40AD-A765-889C9768CD83", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:antivir_webgate_suite:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB6F056D-B117-465E-9C77-2655F83DC32E", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:antivirus_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2495B204-480F-4C0D-8A43-955D17A94590", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:exchange_security:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B60B790-6B4B-431E-BD1A-1CAE80DCDF5C", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:professional_security:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D2869FB-4930-4B47-8169-A7DD9A7FC488", "versionEndExcluding": "8.2.12.58"}, {"criteria": "cpe:2.3:a:avira:savapi:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1E6C9D3-2F10-4142-B736-B4F47FAD9FE2", "versionEndExcluding": "8.2.12.58"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}