CVE-2007-2846: Avas!t Avast! Antivirus

High severity, CVSS 9.3. EPSS: 7.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."

Affected products

• Avas!t Avast! Antivirus: version 4.6.394 only
• Avast! Avast! Antivirus: up to and including 4.7.652

Published 2007-05-24. Last modified 2026-06-16.