FortiClient VulnerabilitySecurity Vulnerabilities fixed in Avira 15.0.2004.1825
Description
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific location, and pass this event to the driver, thereby defeating the anti-virus functionality.
Affected Applications
Avira
CVE References
CVE-2020-8961Other References
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8961| ID | 2605 |
| Created | May 20, 2021 |
| Description Updated |
Nov 03, 2023 |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | Avira |
| Patch | manual |
| Application | Avira |