High severity7.8NVD Advisory· Published Jul 27, 2017· Updated Jun 17, 2026

CVE-2016-10402

Description

Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow.

Affected products

Avira/Antivirus2 versions
cpe:2.3:a:avira:antivirus:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:avira:antivirus:*:*:*:*:*:windows:*:*range: <=8.3.36.59
- (no CPE)range: <8.3.36.60

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/84841nvdThird Party AdvisoryVDB Entry
bugs.chromium.org/p/project-zero/issues/detailnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000