CVE-2015-7303

EUVD-2015-7232
Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
aviramanagement_console
*
𝑥
= Vulnerable software versions
References
http://www.zerodayinitiative.com/advisories/ZDI-15-445
http://www.zerodayinitiative.com/advisories/ZDI-15-445