Login Request a demo
Unscored severity · published Mar 19, 2006
CVE-2006-1274
Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Antivir Personal · Avira
7 · source: NVD
Affected product
AP
Antivir Personal
Avira
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1274
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1274
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042868.html
Vendor Advisory
http://secunia.com/advisories/19217
securityreason.com
http://securityreason.com/securityalert/573
www.osvdb.org
http://www.osvdb.org/23843
www.securityfocus.com
http://www.securityfocus.com/archive/1/427412/100/0/threaded
Patch
http://www.securityfocus.com/bid/17071
More from Antivir Personal
5.5
CVE-2013-4602
A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine
–
CVE-2008-6962
Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that…
–
CVE-2007-1673
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry…
–
CVE-2007-1671
avpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a…
–
CVE-2006-4619
The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the (1)…