GCVE - cpe:2.3:a:alwil:avast_antivirus:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:alwil:avast_antivirus:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Alwil (`04349e51-334b-5f27-84c1-adc50d2823f5`)
Product	Avast Antivirus (`3983f4d4-b31c-5a81-b14b-8fb3840bab61`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4626`	vulnerable	2026-06-08 04:49:18.411831	Details available Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow. Published: 2006-09-07T21:00:00.000Z Updated: 2024-08-07T19:14:47.874Z Open on db.gcve.eu Reference links http://www.hustlelabs.com/advisories/04072006_alwil.pdf http://www.securityfocus.com/bid/19903 http://www.vupen.com/english/advisories/2006/3515 http://secunia.com/advisories/21794	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1355`	vulnerable	2026-06-08 04:48:57.013251	Details available avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files. Published: 2006-03-22T02:00:00.000Z Updated: 2024-08-07T17:12:20.932Z Open on db.gcve.eu Reference links http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20 http://secunia.com/advisories/19284 http://forum.avast.com/index.php?topic=19862.0 http://www.vupen.com/english/advisories/2006/1011 https://exchange.xforce.ibmcloud.com/vulnerabilities/25336	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3214`	vulnerable	2026-06-08 04:48:39.941274	Details available Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Published: 2005-10-14T04:00:00.000Z Updated: 2024-08-07T23:01:59.062Z Open on db.gcve.eu Reference links http://shadock.net/secubox/AVCraftedArchive.html http://marc.info/?l=bugtraq&m=112879611919750&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.