http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html

http://seclists.org/fulldisclosure/2020/Feb/31

https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html

https://www.zoller.lu/%5BTZO-01-2020%5D%20AVIRA%20Generic%20Bypass%20ISO.pdf

MITRE disputed

** DISPUTED ** Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product.

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product

MITRE https://www.zoller.lu/%5BTZO-01-2020%5D%20AVIRA%20Generic%20Bypass%20ISO.pdf [No types assigned]

MITRE https://www.zoller.lu/[TZO-01-2020]%20AVIRA%20Generic%20Bypass%20ISO.pdf

http://seclists.org/fulldisclosure/2020/Feb/31 No Types Assigned

http://seclists.org/fulldisclosure/2020/Feb/31 Mailing List, Third Party Advisory

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK.

** DISPUTED ** Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product.

http://seclists.org/fulldisclosure/2020/Feb/31 [No Types Assigned]

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NIST (AV:N/AC:M/Au:N/C:N/I:P/A:N)

NIST CWE-434

OR
     *cpe:2.3:a:avira:anti-malware_sdk:*:*:*:*:*:*:*:* versions up to (excluding) 8.3.54.138
     *cpe:2.3:a:avira:antivirus_server:*:*:*:*:*:*:*:* versions up to (excluding) 8.3.54.138
     *cpe:2.3:a:avira:avira_antivirus_for_endpoint:*:*:*:*:*:*:*:* versions up to (excluding) 8.3.54.138
     *cpe:2.3:a:avira:avira_antivirus_for_small_business:*:*:*:*:*:*:*:* versions up to (excluding) 8.3.54.138
     *cpe:2.3:a:avira:avira_exchange_security:*:*:*:*:*:*:*:* versions up to (excluding) 8.3.54

http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html No Types Assigned

http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html Third Party Advisory, VDB Entry

https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html No Types Assigned

https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html Third Party Advisory

https://www.zoller.lu/[TZO-01-2020]%20AVIRA%20Generic%20Bypass%20ISO.pdf Broken Link

https://www.zoller.lu/[TZO-01-2020]%20AVIRA%20Generic%20Bypass%20ISO.pdf Third Party Advisory

Victim must voluntarily interact with attack mechanism

http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html [No Types Assigned]