Avant Force » Avant Browser : Security Vulnerabilities, CVEs, CVSS score >= 3
Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page. NOTE: a related attack was reported in which an arbitrary file: URL is shown.
Max CVSS
4.3
EPSS Score
0.11%
Published
2009-08-28
Updated
2009-08-31
Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Type HTTP header.
Max CVSS
9.3
EPSS Score
6.10%
Published
2007-03-19
Updated
2017-10-11
Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
Max CVSS
7.5
EPSS Score
2.56%
Published
2003-12-31
Updated
2017-07-29
3 vulnerabilities found