CVE-2016-10402 Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer ove...
HighCVSS 7.8
EPSS 10.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avira antivirus | <= 8.3.36.59 | No fix listed |
References
- 84841 third-party-advisory vdb-entry
- bugs.chromium.org third-party-advisory