« Volver al listado

CVE-2024-9483

Estado: AnalizadaMedia (5.5)—

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Avast — AntivirusAVG — Antivirus

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-9483",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-9483",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-04T13:34:56.915713Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@nortonlifelock.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.1,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.4
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@nortonlifelock.com",
      "affectedData": [
        {
          "vendor": "AVG/Avast",
          "product": "Antivirus",
          "versions": [
            {
              "status": "affected",
              "version": "24/Sep/2024",
              "lessThan": "< 24092400",
              "versionType": "date"
            }
          ],
          "platforms": [
            "MacOS",
            "Windows",
            "Linux"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-10-04T13:15:12.980",
  "references": [
    {
      "url": "https://support.norton.com/sp/static/external/tools/security-advisories.html",
      "tags": [
        "Not Applicable"
      ],
      "source": "security@nortonlifelock.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@nortonlifelock.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing."
    },
    {
      "lang": "es",
      "value": "Una desreferencia de puntero nulo en el módulo de verificación de firma en la firma AVG/Avast Antivirus &lt;24092400 publicada el 24/sep/2024 en MacOS puede permitir que un archivo xar mal formado bloquee la aplicación durante el procesamiento."
    }
  ],
  "lastModified": "2026-06-17T08:24:39.937",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avast:antivirus:*:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "332D750A-C14D-4E7D-8296-99B46A1155A4",
              "versionEndExcluding": "24092400"
            },
            {
              "criteria": "cpe:2.3:a:avg:antivirus:*:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2EB9416-935A-4FF0-AD75-DFCDD6BC1AFF",
              "versionEndExcluding": "24092400"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@nortonlifelock.com"
}