CVE-2007-2974: Avira Antivir

High severity, CVSS 10.0. EPSS: 7.5% chance of exploitation in the next 30 days.

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."

Affected products

• Avira Antivir: up to and including 7.04.00.23
• Avira AV Pack: up to and including 7.03.00.08

Published 2007-06-01. Last modified 2026-06-16.