CVE:CVE-2017-6417
CNNVD:CNNVD-201703-010
Avira Total Security Suite等都是德国Avira公司的病毒防护软件套件。
多款Avira产品中存在代码注入漏洞。本地攻击者可利用该漏洞绕过保护机制，执行任意代码。以下产品和版本受到影响：Avira Total Security Suite 15.0及之前的版本，Optimization Suite 15.0及之前的版本，Internet Security Suite 15.0及之前的版本，Free Security Suite 15.0及之前的版本。
solution:Upgrade avira free_security_suite to a higher version than 15.0,and avoid the version (,15.0]; Upgrade avira internet_security_suite to a higher version than 15.0,and avoid the version (,15.0]; Upgrade avira optimization_suite to a higher version than 15.0,and avoid the version (,15.0]; Upgrade avira total_security_suite to a higher version than 15.0,and avoid the version (,15.0]