CVE-2008-6846: Avast Antivirus

Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed (1) ISO or (2) RPM file.

Affected products

• Avast Avast Antivirus: version 1.0.5 only; version 1.0.5-1 only; version 1.0.8 only

Published 2009-07-02. Last modified 2026-06-16.