CVE-2009-1784

AVG Anti-Virus < 8.0.156 - Malware Detection Bypass via Crafted RAR and ZIP Archives

Title source: llm
STIX 2.1

Description

The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50426
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/503392/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34895

Scores

EPSS 0.0341
EPSS Percentile 87.5%

Details

CWE
CWE-20
Status published
Products (11)
avg/avg_anti-virus 6.0.710
avg/avg_anti-virus 7.0
avg/avg_anti-virus 7.0.251
avg/avg_anti-virus 7.0.323
avg/avg_anti-virus 7.1.308
avg/avg_anti-virus 7.1.407
avg/avg_anti-virus 7.5.51
avg/avg_anti-virus 7.5.448
avg/avg_anti-virus 7.5.476
avg/avg_anti-virus 8.0
... and 1 more
Published May 22, 2009
Tracked Since Feb 18, 2026