CVE-2008-6846

CWE-119 — Buffer Overflow4 documents4 sources
Severity
6.8MEDIUM
EPSS
4.2%
top 11.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Avast Avast Antivirus
Timeline
PublishedJul 2
Latest updateMay 14

Description

Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed (1) ISO or (2) RPM file.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDavast/avast_antivirus1.0.5, 1.0.5-1, 1.0.8+2

🔴Vulnerability Details

2
GHSA
GHSA-j9q4-c7cr-r2mp: Multiple stack-based buffer overflows in avast! Linux Home Edition 1↗2022-05-14
▶
CVEList
CVE-2008-6846: Multiple stack-based buffer overflows in avast! Linux Home Edition 1↗2009-07-02
▶

💥Exploits & PoCs

1
Exploit-DB
Axigen 5.0.2 - AXIMilter Remote Format String↗2008-01-21
▶
CVE-2008-6846 (MEDIUM CVSS 6.8) | Multiple stack-based buffer overflo | cvebase.io