← Vulnerability feed

Vulnerability record · CVE-2007-2845 · published 24 May 2007

CVE-2007-2845: Avast antivirus vulnerability

Avast · Avast Antivirus

Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around".

9.3 CVSS 2.0 High EPSS 6.3% · top 6.7%
9.3CVSS 2.0 base score
6.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around".

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=full-disclosure&m=118000321419384&w=2
http://osvdb.org/36523
http://secunia.com/advisories/25380
http://www.avast.com/eng/adnm-management-client-revision-history.html
http://www.securityfocus.com/archive/1/469469/100/0/threaded
http://www.securityfocus.com/bid/24132 Patch
http://www.securitytracker.com/id?1018108
http://www.vupen.com/english/advisories/2007/1935
https://exchange.xforce.ibmcloud.com/vulnerabilities/34477
http://marc.info/?l=full-disclosure&m=118000321419384&w=2
http://osvdb.org/36523
http://secunia.com/advisories/25380
http://www.avast.com/eng/adnm-management-client-revision-history.html
http://www.securityfocus.com/archive/1/469469/100/0/threaded
http://www.securityfocus.com/bid/24132 Patch
http://www.securitytracker.com/id?1018108
http://www.vupen.com/english/advisories/2007/1935
https://exchange.xforce.ibmcloud.com/vulnerabilities/34477

Track CVE-2007-2845 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2008-5523Avast antivirus improper input validation vulnerabilityavast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by pla…EPSS 2.9%7.8CVE-2007-1673Amavis vulnerabilityunzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a …EPSS 3.2%7.8CVE-2007-1672Avast antivirus vulnerabilityavast! antivirus before 4.7.981 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that…EPSS 3.2%6.8CVE-2008-6846Avast antivirus memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (app…EPSS 3.7%6.4CVE-2015-5662Avast antivirus path traversal vulnerabilityDirectory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP…EPSS 3.0%

Source: NIST National Vulnerability Database (record CVE-2007-2845), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.