CVE-2007-6265

Unspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows remote attackers to have an unknown impact via a crafted TAR archive.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/27929	Vendor Advisory
http://www.avast.com/eng/avast-4-home_pro-revision-history.html	Patch
http://www.securityfocus.com/bid/26702	Exploit
http://www.vupen.com/english/advisories/2007/4097
https://exchange.xforce.ibmcloud.com/vulnerabilities/38877

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:avast:avast_antivirus_home:4.0:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.6:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.6.652:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.6.655:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.6.665:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.6.691:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.7.827:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.7.844:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.7.869:::::::*
	cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.0:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.6:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.6.603:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.6.652:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.6.665:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.6.691:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:::::::*
	cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:::::::*

History

No history.

Information

Published : 2007-12-07 11:46

Updated : 2023-12-10 10:40

NVD link : CVE-2007-6265

Mitre link : CVE-2007-6265

CVE.ORG link : CVE-2007-6265

JSON object : View

Products Affected

avast

avast_antivirus_professional
avast_antivirus_home

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2007-6265", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-12-07T11:46:00.000", "references": [{"url": "http://secunia.com/advisories/27929", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.avast.com/eng/avast-4-home_pro-revision-history.html", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26702", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/4097", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38877", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in avast! 4 Home and Professional Editions before 4.7.1098 allows remote attackers to have an unknown impact via a crafted TAR archive."}, {"lang": "es", "value": "Vulnerabilidad no especificada en avast! 4, ediciones Home y Professional, en versiones anteriores a la 4.7.1098. Permite que atacantes remotos provoquen un impacto desconocido usando un archivo TAR manipulado."}], "lastModified": "2017-08-08T01:29:03.197", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1519A450-8F71-408A-81B8-AA6F337E7A25"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48872452-2B26-44C4-A9FF-0D9D23AAC95A"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.652:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "275D7948-61FB-4415-A9EB-59EEF9757149"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.655:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CCC4081-D877-4DE3-9342-59BCE7C41CE2"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.665:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B189DFCB-2307-43B4-8102-BA725CEE0711"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.6.691:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C733E69-33B3-465B-B146-A68C26373E00"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.827:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EF16A3D-BC29-4426-BDF5-F1C6E85228B0"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.844:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E02983BB-F027-4967-A230-933299D2D061"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.869:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "238FB2B1-41CF-46DB-8ED7-7F2B6609C27D"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_home:4.7.1043:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97FEA351-FFF6-4452-9A2B-A7AAF4D7EE20"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "231DDF5E-5026-4844-8374-45F0926F8C4F"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8822D55C-FEE7-41B5-A8D5-8D9F514CF815"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.603:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B89C0CA4-00DE-4CAD-B554-36C46815A919"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.652:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A618B922-80E7-4769-90BA-5FE231DA6B89"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.665:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40F19B83-BAD9-4CDC-95C5-6D352F223AA9"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.6.691:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "762B6C23-5ADD-4221-8146-DF9CE95637BB"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.827:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F3B1651-DC3E-43B8-A5A4-8BEF7D668EEC"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.844:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D0980CA-26A4-468E-82F3-E03953250343"}, {"criteria": "cpe:2.3:a:avast:avast_antivirus_professional:4.7.1043:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB0EF168-1F0D-4772-8922-0A75CAF28661"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}