What’s Vulnerable › Vulnerabilities

CVE-2016-10402

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-27 · updated 2026-06-17
• Weakness: CWE-119

Description

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow.

Affected products

• Avira Antivirus: through 8.3.36.59

References

• http://www.securityfocus.com/bid/84841
• https://bugs.chromium.org/p/project-zero/issues/detail?id=765
• http://www.securityfocus.com/bid/84841
• https://bugs.chromium.org/p/project-zero/issues/detail?id=765

Get alerted when CVE-2016-10402 or the next vulnerability affects your stack