CVE-2023-1900 - OpenCVE

A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. Issue was fixed with Endpointprotection.exe version 1.0.2303.633

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Avira	Antivirus

Configuration 1 [-]

cpe:2.3:a:avira:antivirus:*:*:*:*:*:windows:*:*

No data.

References

Link	Providers
https://support.norton.com/sp/static/external/tools/security-advisories.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: NLOK

Published: 2023-04-19T18:47:17.392Z

Updated: 2024-08-02T06:05:26.729Z

Reserved: 2023-04-05T21:22:42.387Z

Link: CVE-2023-1900

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-04-19T19:15:07.190

Modified: 2023-04-29T02:28:00.223

Link: CVE-2023-1900

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-1900", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "state": "PUBLISHED", "assignerShortName": "NLOK", "dateReserved": "2023-04-05T21:22:42.387Z", "datePublished": "2023-04-19T18:47:17.392Z", "dateUpdated": "2024-08-02T06:05:26.729Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Endpointprotection.exe"], "platforms": ["Windows"], "product": "Avira Antivirus ", "vendor": "AVIRA", "versions": [{"lessThan": "1.0.2303.633", "status": "affected", "version": "0", "versionType": "1.0.2303.633 "}]}], "datePublic": "2023-04-20T19:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. <br>Issue was fixed with Endpointprotection.exe version 1.0.2303.633"}], "value": "A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. \nIssue was fixed with Endpointprotection.exe version 1.0.2303.633"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-190", "description": "CWE-190 Integer Overflow or Wraparound", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "NLOK", "dateUpdated": "2023-04-19T18:47:17.392Z"}, "references": [{"url": "https://support.norton.com/sp/static/external/tools/security-advisories.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T06:05:26.729Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.norton.com/sp/static/external/tools/security-advisories.html", "tags": ["x_transferred"]}]}]}}