CVE-2020-8961
Critical
Description
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific location, and pass this event to the driver, thereby defeating the anti-virus functionality.
SeverityCritical
CVSS9.8
Exploit probability—
ProductAvira Free Antivirus
PublishedApr 9, 2020
First seenApr 9, 2020
How to fix
Update
- avira free_antivirus15.0.2004.1825 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avira free_antivirus | v < 15.0.2004.1825 | 15.0.2004.1825 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.