« Volver al listado

CVE-2009-1784

Estado: ModificadaAlta (10)—

The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

AVG — AVG Anti-virus

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-1784",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-05-22T20:30:00.920",
  "references": [
    {
      "url": "http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/503392/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/34895",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50426",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/503392/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/34895",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50426",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive."
    },
    {
      "lang": "es",
      "value": "El motor de análisis AVG 8.5 323, como se usa en varios productos antivirus AVG, incluida la Edición de red antivirus, la Edición de Internet Security Netzwerk, la Edición de servidor para Linux / FreeBSD, la Edición antivirus SBS y otros permite a los atacantes remotos evitar la detección de malware a través de un (1) archivo RAR y (2) ZIP especialmente diseñado."
    }
  ],
  "lastModified": "2026-06-16T23:08:03.163",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BA92C19-E04F-45FF-A0D1-50D639C6EBF5",
              "versionEndIncluding": "8.0.156"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:6.0.710:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ACBDC1AD-F439-49E0-8068-7BE3C4F44239"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "279AB9A2-1660-49C9-8AE8-26F7B0B6C51A"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.0.251:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF6D8EA9-E270-4331-995C-D4D378988031"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.0.323:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0C61BD5-365F-4BC6-82E3-68B57B01B8D0"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.1.308:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2862A586-9B51-4F73-A395-79B9B526E2DE"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.1.407:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D90909A9-4032-4604-8FE6-16374BA21BAA"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.5.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA3D2B2C-1325-4712-97D3-AC3779B82210"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.5.448:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8722A8E-1848-44E6-BFC3-C16072976F73"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:7.5.476:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EDAD78A-7497-4EF3-8EE5-1C256BE931A5"
            },
            {
              "criteria": "cpe:2.3:a:avg:avg_anti-virus:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B85F998-DACB-46BC-9181-DF8D768D0C62"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}