CVE-2019-17449 - Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack

Back Back to CVE browser

MEDIUM

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack

Published Oct 10, 2019

6.7

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (2)

https://safebreach.com/Post/Avira-Antivirus-2019-4-Services-DLL-Preloading-and-Potential-Abuses-CVE-2019-17449
x_refsource_MISC
https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater
x_refsource_MISCRelease Notes

Link	Providers	Tags
https://safebreach.com/Post/Avira-Antivirus-2019-4-Services-DLL-Preloading-and-Potential-Abuses-CVE-2019-17449		x_refsource_MISC
https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater		x_refsource_MISCRelease Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 10, 2019

Updated Aug 5, 2024

Reserved Oct 10, 2019

Link CVE-2019-17449

CISA Vulnrichment

Updated Jun 11, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-17449

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-17449