CVE-2006-5940: Undefined Security Weakness

Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" and parsing of .EXE files...

CVE-2006-5940

Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" and parsing of .EXE files...

AVG Anti-Virus多个远程代码执行漏洞

AVG Anti-Virus是一款功能完备的杀毒软件。 AVG Anti-Virus的文件解析引擎存在多个漏洞，目前已确定的漏洞包括： - 解析.CAB文件时的整数溢出可能导致堆溢出； - 解析.CAB文件时未初始化变量； - 解析.DOC文件时会分隔为0； - 解析.RAR文件时的整数溢出可能导致堆溢出； - 解析.EXE文件时存在整数问题。 如果攻击者创建了特制文件的话，这些漏洞就可能导致远程执行任意代码。 Grisoft AVG Anti-Virus 7.1.407 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[Full-disclosure] AVG Anti-Virus - Arbitrary Code Execution (remote)

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.002 13-Nov-2006 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Arbitrary Code Execution remote Vendor communication: 2006/08/24 initial notification to Grisoft Inc. 2006/08/24 Grisoft Inc. Respon...

AVG Antivirus multiple security vulnerabilities

Heap overflow on CAB and RAR archives parsing, integer overflow on EXE parsing...

CVE-2006-1125

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including 1 updvers.cfg, 2 incavi.avm, and 3 unspecified drivers, which might allow local users to gain privileges...

Design/Logic Flaw

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including 1 updvers.cfg, 2 incavi.avm, and 3 unspecified drivers, which might allow local users to gain privileges...

CVE-2006-1125

This CVE affects Grisoft AVG Free 7.1 (and earlier 7.0.308) where update-related files (upd_vers.cfg, incavi.avm, and some unspecified drivers) can be granted Everyone/Full Control. The underlying issue is that these files are writable by all users, potentially enabling local privilege escalation...

CVE-2006-1125

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including 1 updvers.cfg, 2 incavi.avm, and 3 unspecified drivers, which might allow local users to gain privileges...

CVE-2006-1125: Undefined Security Weakness

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including 1 updvers.cfg, 2 incavi.avm, and 3 unspecified drivers, which might allow local users to gain privileges...

AVG 7 granting Everyone Full Control to updated files... even its drivers

There is more here: http://www.dslreports.com/forum/remark,15601404 Basically, a first time install of AVG 7 will have default permissions. Program FilesGrisoftAVG Free has inherited permissions from Program Files. This is preferred, because lower privileged accounts can't damage it. Once any fil...

AVG antivirus weak file permissions

Everyone:Full Control permission is set for files, including drivers, after update...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

Affected by the anti - virusengine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus Personal Pro 4.5.0.104 Kaspersky Antivirus For MS NTServer 4.5.0.1...

CVE-2005-3371

Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...

CVE-2005-3371

Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...

CVE-2005-3371

The CVE-2005-3371 entry describes a vulnerability in AVG 7.0.323 labeled the “magic byte bug.” A multiple interpretation error occurs when scanning files like BAT, HTML, and EML that start with an MZ (EXE) signature, causing such files to be treated as safe type yet still executable by end-system...

CVE-2005-3371: Undefined Security Weakness

Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a...

CVE-2005-3234

Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip,...

CVE-2005-3234

Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip,...

CVE-2005-3234

The CVE-2005-3234 entry describes a vulnerability in Grisoft AVG Antivirus (unspecified versions) caused by a multiple interpretation error in a specially crafted RAR file with malformed central and local headers. This flaw can allow remote attackers to bypass virus detection despite the RAR bein...