Avira AntiVir Zip Scan Evasion

Medium Nessus Plugin ID 38875


The remote host is running an antivirus application that is affected by a file evasion vulnerability.


The remote host is running an Avira AntiVir product. The scan engine of the installed product is earlier than / Such versions reportedly fail to properly inspect specially crafted 'ZIP' files. An attacker could embed code in a ZIP file in order to circumvent detection by antivirus software.


Use the Avira update feature to upgrade the scan engine to / or later.

See Also



Plugin Details

Severity: Medium

ID: 38875

File Name: avira_antivir_zip_evasion.nasl

Version: $Revision: 1.8 $

Type: local

Agent: windows

Family: Windows

Published: 2009/05/24

Modified: 2015/01/12

Dependencies: 13855

Risk Information

Risk Factor: Medium


Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Required KB Items: SMB/registry_full_access

Exploit Available: false

Exploit Ease: No known exploits are available

Reference Information

BID: 34723