← Vulnerability feed

Vulnerability record · CVE-2009-2761 · published 13 August 2009

CVE-2009-2761: Avira antivir vulnerability

Avira · Antivir

Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the "C:\Program Files\avira\" directory.

7.2 CVSS 2.0 High EPSS 0.35% · top 73.5%
7.2CVSS 2.0 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the "C:\Program Files\avira\" directory.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html
http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html
http://www.osvdb.org/55647
http://www.vupen.com/english/advisories/2008/3130 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46568
http://archives.neohapsis.com/archives/bugtraq/2009-01/0146.html
http://blog.zoller.lu/2009/01/tzo-2009-2-avira-antivir-priviledge.html
http://www.osvdb.org/55647
http://www.vupen.com/english/advisories/2008/3130 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46568

Track CVE-2009-2761 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-2974Avira antivir vulnerabilityBuffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a craft…EPSS 7.5%7.8CVE-2007-2972Avira antivir vulnerabilityThe file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash) via a c…EPSS 3.4%7.8CVE-2007-2973Avira antivir vulnerabilityAvira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed TA…EPSS 3.4%7.8CVE-2007-1673Amavis vulnerabilityunzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a …EPSS 3.2%7.2CVE-2008-6962Avira antivir improper input validation vulnerabilityAvira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a c…EPSS 0.65%4.3CVE-2012-1457Antivirus TAR parser malware detection bypass via oversized length fieldThe TAR file parser in numerous antivirus and anti-malware products mishandles a TAR archive entry whose length field exceeds the total TAR file size…EPSS 98%analysed4.3CVE-2012-1459TAR parser malware detection bypass in multiple antivirus productsThe TAR file parser in dozens of antivirus products mishandles a TAR archive entry whose length field spans the entire entry plus part of the next en…EPSS 100%analysed4.3CVE-2012-1443RAR parser malware detection bypass in multiple antivirus enginesThe RAR file parser in dozens of antivirus products fails to correctly handle a RAR archive whose contents begin with an MZ character sequence, allow…EPSS 100%analysed

Source: NIST National Vulnerability Database (record CVE-2009-2761), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.