CVE-2016-10402

CVE-2016-10402 describes a remote code execution vulnerability in Avira Antivirus engine versions prior to 8.3.36.60. This flaw allows an attacker to execute code as NT AUTHORITY\SYSTEM by crafting a malicious PE file with an oversized relative virtual address in its section header, leading to an integer overflow and heap-based buffer underflow. With a CVSS score of 7.8 (HIGH), this vulnerability has a local attack vector requiring user interaction (e.g., opening a malicious file) and can result in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.