Back to Database
Status published
Medium
CVE-2019-17449
Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack....
Vulnerability Description
Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-17449
Credits & Attribution
No credits recorded in the NVD database.
References
More from avira
View All →CVE-2020-9320
Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a...
Medium
5.5
CVE-2020-8961
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The...
Critical
9.8
CVE-2020-12680
Avira Free Antivirus through 15.0.2005.1866 allows local users to discover...
Medium
5.5
CVE-2020-12463
An elevation of privilege vulnerability exists in Avira Software Updater...
High
7.8
CVE-2020-12254
Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or...
High
7.8
Affected Vendor
avira
View all reports →Affected Software
software updater
Vulnerable Versions:
0
Timeline
Official Publish:
October 10th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.