Remote Code Execution Vulnerability in Avira Antivirus
CVE-2005-3219

Currently unrated

Key Information:

Vendor

Avira

Status
Antivir Personal
Vendor
CVE Published:
14 October 2005

What is CVE-2005-3219?

An issue in unspecified versions of Avira Antivirus presents a security vulnerability that enables remote attackers to circumvent virus detection mechanisms. The vulnerability arises from multiple interpretation errors when processing specially crafted RAR files containing malformed central and local headers. These malicious executables can exploit weaknesses to bypass detection, successfully opening through applications such as WinRAR and PowerZip while being flagged as corrupt by other popular utilities like WinZip and BitZipper.

References

http://shadock.net/secubox/AVCraftedArchive.html
x_refsource_MISC
http://marc.info/?l=bugtraq&m=112879611919750&w=2
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.