PatchTheCVEantivir vulnerabilities and fixes
Recent CVEs affecting antivir, with upgrade or downgrade steps. 4 tracked.
antivir has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2012-03-21. Highest priority: CVE-2008-5521 (score 52/100).
- CVE-2012-1425 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11
- CVE-2009-2761 HIGH 7.2 MITIGATE MITIGATE Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Pre
- CVE-2008-6962 HIGH 7.2 DOWNGRADE MITIGATE Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local
- CVE-2008-5521 HIGH 9.3 DOWNGRADE Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers t
FAQ
How do I fix antivir vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is antivir being exploited right now?
None of the tracked antivir CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which antivir CVE should I patch first?
CVE-2008-5521 currently ranks highest (52/100): Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers t.