Description
The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the (1) IParam parameter, and the (2) PBM_GETRANGE and (3) PBM_SETRANGE messages in an unspecified progress bar. NOTE: some details are obtained from third party information.
References
- 20060904 Anti-vir vulnerability mailing-list
- 19889 vdb-entry
- 21764 third-party-advisory
- 19843 vdb-entry
- 20060904 Anti-vir2 mailing-list