Skip to content
OpenAdvisories
Medium WID-SEC-2024-3084 4 CVEs

AVG Anti-Virus: Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 6, 2024 · Updated Oct 6, 2024 · de-DE

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in AVG Anti-Virus ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.

Product

AVG Anti-Virus ist eine Lösung zum Schutz vor Computerviren.

Vulnerabilities 4

  • Medium 5.1

    Out of Bounds write on scan of malformed eml file may crash the application

    An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing.

  • Medium 5.1

    Out of Bounds write on scan of malformed Mach-O file may crash the application

    An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing.

  • Medium 5.1

    Uninitialized variable in digital signiture verification may crash the application

    A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.

  • Medium 5.1

    An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on M…

Revision history

  1. #1

    Initiale Fassung

References