CVE-2007-2846
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700...
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
- Record
CVE-2007-2846- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
- Record
CVE-2007-2846- Updated
- 2026-11-02
EUVDEUVD-2007-2838 No score
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
- Record
EUVD-2007-2838- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pxp4-5rm6-xqjp No score
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700...
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
- Record
GHSA-pxp4-5rm6-xqjp- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2846 is a high vulnerability (CVSS 9.3) in Avas\!t Avast\! Antivirus, published May 24, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.74%, the 94th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/34501
securityfocus.com/bid/24155
avast.com/eng/adnm-management-client-revision-history.html
marc.info?l=full-disclosure&m=118007660813710&w=2
kb.cert.org/vuls/id/125868
osvdb.org/36522
Show 6 moreShow less
nruns.com/advisories/%5Bn.runs-SA-2007.009%5D%20-%20Avast%21%20Antivirus%20SIS%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
vupen.com/english/advisories/2007/1935
nvd.nist.gov/vuln/detail/CVE-2007-2846
github.com/advisories/GHSA-pxp4-5rm6-xqjp