Avira AntiVir PDF Scan Evasion

medium Nessus Plugin ID 38876

Synopsis

The remote host is running an antivirus application that is affected by a file evasion vulnerability.

Description

The remote host is running an Avira AntiVir product. The scan engine of the installed product is earlier than 7.9.0.168 / 8.2.0.168. Such versions reportedly fail to properly inspect specially crafted 'PDF' files. An attacker could embed code in a PDF file in order to circumvent detection by antivirus software.

Solution

Use the Avira update feature to upgrade the scan engine to 7.9.0.168 / 8.2.0.168 or later.

Plugin Details

Severity: Medium

ID: 38876

File Name: avira_antivir_pdf_evasion.nasl

Version: 1.10

Type: local

Agent: windows

Family: Windows

Published: 5/24/2009

Updated: 8/7/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Information

Required KB Items: SMB/registry_full_access

Exploit Ease: No known exploits are available

Reference Information

BID: 35008

Detections

Analytics