HTTP: Avira Management Console Server HTTP Header Processing Heap Buffer Overflow

A heap buffer overflow vulnerability has been reported in Avira Management Console Server. The vulnerability exists in the way Update Manager Service handles overly long HTTP headers. A remote unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the server. Successful exploitation could lead to arbitrary code execution in the security context of System.

Short Name

HTTP:MISC:AVIRA-MGNT-HEADER-BOF

Severity

Major

Recommended

True

Recommended Action

None

HTTP: Avira Management Console Server HTTP Header Processing Heap Buffer Overflow

Found a potential security threat?