CVE-2013-4602

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.4%
top 37.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Avira Antivir MailgateAvira Antivir Mailgate SuiteAvira Antivir Personal+7 more
Timeline
PublishedFeb 12
Latest updateMay 5

Description

A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

▶NVDavira/antivir_webgate< 8.2.12.58
▶NVDavira/antivir_mailgate< 8.2.12.58
▶NVDavira/antivir_personal< 8.2.12.58
▶NVDavira/antivirus_server< 8.2.12.58
▶NVDavira/antivir_sharepoint< 8.2.12.58

🔴Vulnerability Details

2
GHSA
GHSA-4ghf-h9pg-hhpp: A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8↗2022-05-05
▶
CVEList
CVE-2013-4602: A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8↗2020-02-12
▶
CVE-2013-4602 (MEDIUM CVSS 5.5) | A Denial of Service (infinite loop) | cvebase.io