← Vulnerability feed

Vulnerability record · CVE-2008-6662 · published 7 April 2009

CVE-2008-6662: Avg anti-virus improper input validation vulnerability

Avg · Avg Anti Virus

AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption.

4.3 CVSS 2.0 Medium EPSS 3.4% · top 11.8% CWE-20 · Improper input validation
4.3CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption.

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=122893196715523&w=2 Mailing ListThird Party Advisory
http://www.ivizsecurity.com/security-advisory-iviz-sr-08014.html Third Party Advisory
http://www.osvdb.org/51962 Broken Link
http://www.securityfocus.com/bid/32749 Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2008/3461 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/47254 Third Party AdvisoryVDB Entry
http://marc.info/?l=bugtraq&m=122893196715523&w=2 Mailing ListThird Party Advisory
http://www.ivizsecurity.com/security-advisory-iviz-sr-08014.html Third Party Advisory
http://www.osvdb.org/51962 Broken Link
http://www.securityfocus.com/bid/32749 Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2008/3461 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/47254 Third Party AdvisoryVDB Entry

Track CVE-2008-6662 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-1784Avg anti-virus improper input validation vulnerabilityThe AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition,…EPSS 3.4%4.3CVE-2012-1456Antivirus TAR parsers bypassed by appended ZIP fileMultiple antivirus products parse TAR archives in a way that lets a TAR file with an appended ZIP evade malware detection. An attacker can therefore …EPSS 100%analysed4.3CVE-2012-1457Antivirus TAR parser malware detection bypass via oversized length fieldThe TAR file parser in numerous antivirus and anti-malware products mishandles a TAR archive entry whose length field exceeds the total TAR file size…EPSS 98%analysed4.3CVE-2012-1459TAR parser malware detection bypass in multiple antivirus productsThe TAR file parser in dozens of antivirus products mishandles a TAR archive entry whose length field spans the entire entry plus part of the next en…EPSS 100%analysed4.3CVE-2012-1461Gzip parser in multiple antivirus products allows malware detection bypassThe Gzip file parser in numerous antivirus and anti-malware products mishandles .tar.gz files containing multiple compressed streams, allowing a craf…EPSS 92%analysed4.3CVE-2012-1462ZIP parser in multiple antivirus products allows malware detection bypassThe ZIP file parser in numerous antivirus and endpoint protection products mishandles a ZIP archive containing an invalid data block at the beginning…EPSS 98%analysed4.3CVE-2012-1443RAR parser malware detection bypass in multiple antivirus enginesThe RAR file parser in dozens of antivirus products fails to correctly handle a RAR archive whose contents begin with an MZ character sequence, allow…EPSS 100%analysed9.5CVE-2026-88771Citrix netscaler application delivery controller improper input validation vulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEV

Source: NIST National Vulnerability Database (record CVE-2008-6662), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.