← Vulnerability feed

Vulnerability record · CVE-2007-2974 · published 1 June 2007

CVE-2007-2974: Avira antivir vulnerability

Avira · Antivir

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."

10.0 CVSS 2.0 High EPSS 7.5% · top 5.7%
10.0CVSS 2.0 base score
7.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://forum.antivir-pe.de/thread.php?threadid=22528 Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063624.html
http://osvdb.org/36712
http://secunia.com/advisories/25417 PatchVendor Advisory
http://securityreason.com/securityalert/2764
http://securitytracker.com/id?1018131
http://www.nruns.com/advisories/%5Bn.runs-SA-2007.010%5D%20-%20Avira%20Antivir%20Antivirus%20LZH%20parsing%20Arbitrary%2 PatchVendor Advisory
http://www.securityfocus.com/archive/1/469805/100/0/threaded
http://www.securityfocus.com/bid/24187 Patch
http://www.vupen.com/english/advisories/2007/1971
https://exchange.xforce.ibmcloud.com/vulnerabilities/34551
http://forum.antivir-pe.de/thread.php?threadid=22528 Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063624.html
http://osvdb.org/36712
http://secunia.com/advisories/25417 PatchVendor Advisory
http://securityreason.com/securityalert/2764
http://securitytracker.com/id?1018131
http://www.nruns.com/advisories/%5Bn.runs-SA-2007.010%5D%20-%20Avira%20Antivir%20Antivirus%20LZH%20parsing%20Arbitrary%2 PatchVendor Advisory
http://www.securityfocus.com/archive/1/469805/100/0/threaded
http://www.securityfocus.com/bid/24187 Patch
http://www.vupen.com/english/advisories/2007/1971
https://exchange.xforce.ibmcloud.com/vulnerabilities/34551

Track CVE-2007-2974 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2007-2972Avira antivir vulnerabilityThe file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash) via a c…EPSS 3.4%7.8CVE-2007-2973Avira antivir vulnerabilityAvira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed TA…EPSS 3.4%7.8CVE-2007-1673Amavis vulnerabilityunzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a …EPSS 3.2%7.2CVE-2009-2761Avira antivir vulnerabilityUnquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Profes…EPSS 0.35%7.2CVE-2008-6962Avira antivir improper input validation vulnerabilityAvira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a c…EPSS 0.65%4.3CVE-2012-1457Antivirus TAR parser malware detection bypass via oversized length fieldThe TAR file parser in numerous antivirus and anti-malware products mishandles a TAR archive entry whose length field exceeds the total TAR file size…EPSS 98%analysed4.3CVE-2012-1459TAR parser malware detection bypass in multiple antivirus productsThe TAR file parser in dozens of antivirus products mishandles a TAR archive entry whose length field spans the entire entry plus part of the next en…EPSS 100%analysed4.3CVE-2012-1443RAR parser malware detection bypass in multiple antivirus enginesThe RAR file parser in dozens of antivirus products fails to correctly handle a RAR archive whose contents begin with an MZ character sequence, allow…EPSS 100%analysed

Source: NIST National Vulnerability Database (record CVE-2007-2974), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.