Back to Database
Status published
High
CVE-2007-2972
The file parsing engine in Avira Antivir Antivirus before 7.04.00.24...
Vulnerability Description
The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2972
Credits & Attribution
No credits recorded in the NVD database.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34556
- http://www.securityfocus.com/bid/24187
- http://forum.antivir-pe.de/thread.php?threadid=22528
- http://www.nruns.com/advisories/%5Bn.runs-SA-2007.011%5D%20-%20Avira%20Antivir%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt
- http://www.vupen.com/english/advisories/2007/1971
- http://osvdb.org/36710
- http://secunia.com/advisories/25417
- http://www.securityfocus.com/archive/1/469880/100/0/threaded
- http://marc.info/?l=full-disclosure&m=118040810718045&w=2
- http://www.securitytracker.com/id?1018132
More from avira
View All →CVE-2020-9320
Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a...
Medium
5.5
CVE-2020-8961
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The...
Critical
9.8
CVE-2020-12680
Avira Free Antivirus through 15.0.2005.1866 allows local users to discover...
Medium
5.5
CVE-2020-12463
An elevation of privilege vulnerability exists in Avira Software Updater...
High
7.8
CVE-2020-12254
Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or...
High
7.8
Affected Vendor
avira
View all reports →Affected Software
antivir, av pack
Vulnerable Versions:
0
Timeline
Official Publish:
June 1st, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.