← Vulnerability feed

Vulnerability record · CVE-2007-2972 · published 1 June 2007

CVE-2007-2972: Avira antivir vulnerability

Avira · Antivir

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.

7.8 CVSS 2.0 High EPSS 3.4% · top 11.5%
7.8CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://forum.antivir-pe.de/thread.php?threadid=22528 Patch
http://marc.info/?l=full-disclosure&m=118040810718045&w=2
http://osvdb.org/36710
http://secunia.com/advisories/25417 PatchVendor Advisory
http://www.nruns.com/advisories/%5Bn.runs-SA-2007.011%5D%20-%20Avira%20Antivir%20Antivirus%20UPX%20parsing%20Divide%20by Vendor Advisory
http://www.securityfocus.com/archive/1/469880/100/0/threaded
http://www.securityfocus.com/bid/24187 Patch
http://www.securitytracker.com/id?1018132
http://www.vupen.com/english/advisories/2007/1971
https://exchange.xforce.ibmcloud.com/vulnerabilities/34556
http://forum.antivir-pe.de/thread.php?threadid=22528 Patch
http://marc.info/?l=full-disclosure&m=118040810718045&w=2
http://osvdb.org/36710
http://secunia.com/advisories/25417 PatchVendor Advisory
http://www.nruns.com/advisories/%5Bn.runs-SA-2007.011%5D%20-%20Avira%20Antivir%20Antivirus%20UPX%20parsing%20Divide%20by Vendor Advisory
http://www.securityfocus.com/archive/1/469880/100/0/threaded
http://www.securityfocus.com/bid/24187 Patch
http://www.securitytracker.com/id?1018132
http://www.vupen.com/english/advisories/2007/1971
https://exchange.xforce.ibmcloud.com/vulnerabilities/34556

Track CVE-2007-2972 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-2974Avira antivir vulnerabilityBuffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a craft…EPSS 7.5%7.8CVE-2007-2973Avira antivir vulnerabilityAvira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed TA…EPSS 3.4%7.8CVE-2007-1673Amavis vulnerabilityunzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a …EPSS 3.2%7.2CVE-2009-2761Avira antivir vulnerabilityUnquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Profes…EPSS 0.35%7.2CVE-2008-6962Avira antivir improper input validation vulnerabilityAvira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a c…EPSS 0.65%4.3CVE-2012-1457Antivirus TAR parser malware detection bypass via oversized length fieldThe TAR file parser in numerous antivirus and anti-malware products mishandles a TAR archive entry whose length field exceeds the total TAR file size…EPSS 98%analysed4.3CVE-2012-1459TAR parser malware detection bypass in multiple antivirus productsThe TAR file parser in dozens of antivirus products mishandles a TAR archive entry whose length field spans the entire entry plus part of the next en…EPSS 100%analysed4.3CVE-2012-1443RAR parser malware detection bypass in multiple antivirus enginesThe RAR file parser in dozens of antivirus products fails to correctly handle a RAR archive whose contents begin with an MZ character sequence, allow…EPSS 100%analysed

Source: NIST National Vulnerability Database (record CVE-2007-2972), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.