CVE-2016-10402

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual…

published July 27, 2017

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10215 · 95.6th percentile
Published
2017-07-27T14:00Z
EPSS history
Timeline
  • 27 JUL 14:00Z
    Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual…
    cvelistv5