CVE-2007-2972: High severity Avira Antivir vulnerability
The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2972?
CVE-2007-2972 is classified as a medium severity vulnerability due to the potential denial of service it can cause.
How do I fix CVE-2007-2972?
To fix CVE-2007-2972, you should upgrade your Avira Antivir Antivirus software to version 7.04.00.24 or later.
Which versions of Avira are affected by CVE-2007-2972?
CVE-2007-2972 affects Avira Antivir Antivirus before version 7.04.00.24 and Avira Av Pack before version 7.03.00.08.
What type of attack does CVE-2007-2972 enable?
CVE-2007-2972 allows remote attackers to perform a denial of service attack by exploiting a divide-by-zero error.
Is there a workaround for CVE-2007-2972?
There are no specific workarounds for CVE-2007-2972; the recommended action is to update the software.