CVE-2007-2845: Avast Antivirus

High severity, CVSS 9.3. EPSS: 6.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around".

Affected products

• Avast Avast Antivirus: up to and including 4.6.394; up to and including 4.7.652

Published 2007-05-24. Last modified 2026-06-16.