Avast Virtualization aswSnx.sys Buffer Overflow Vulnerability

aswSnx.sys handles the 'Sandbox' and 'DeepScreen' features of all Avast Windows products. A buffer overflow vulnerability exists in the Avast Virtualization driver aswSnx.sys v11.1.2245 and earlier. Successful exploitation could allow a local attacker to execute arbitrary code with system...

Avast Antivirus Detection and Status

Avast Antivirus, a commercial antivirus software package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc. include"compat.inc...

Avast Antivirus Path Traversal Vulnerability

The remote Windows host is running Avast Antivirus with a virus definition prior to version 150918-0. It is, therefore, affected by a path traversal vulnerability that occurs when processing ZIP archives. An unauthenticated, remote attacker can exploit this, via a crafted ZIP archive, to delete o...

Avast! Antivirus 'strcpy()' function stack buffer overflow vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A buffer overflow vulnerability exists in the Avast! Antivirus 'strcpy' function, which allows an attacker to exploit the vulnerability to crash the application or execute arbitrary code...

Avast! Antivirus 'filevirus_ttf()' function remote integer overflow vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A remote integer overflow vulnerability exists in the Avast! Antivirus 'filevirusttf' function, which could be exploited by an attacker to crash an application or execute arbitrary code...

Avast! Antivirus 'JetDb::IsExploited4x' Security Bypass Vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A security vulnerability exists in Avast! Antivirus 'JetDb::IsExploited4x' that allows attackers to bypass security restrictions and perform unauthorized operations...

Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables

Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables Source: https://code.google.com/p/google-security-research/issues/detail?id=554 The attached PEncrypt packed executable causes an OOB write on Avast Server Edition. gdb bt 0 0xf6f5e64a in EmulatePolyCodePOLYINFO, int from...

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps...

Avast! - Integer Overflow Verifying numFonts in TTC Header

Source: https://code.google.com/p/google-security-research/issues/detail?id=549 If the numFonts field in the TTC header is greater than SIZEMAX+1 / 4, an integer overflow occurs in filevirusttf when calling CSafeGenFile::SafeLockBuffer. The TTC file format is described here...

Avast! - Heap Overflow Unpacking MoleBox Archives

Source: https://code.google.com/p/google-security-research/issues/detail?id=552 Trivial fuzzing of molebox archives revealed a heap overflow decrypting the packed image in moleboxMaybeUnpack. This vulnerability is obviously exploitable for remote arbitrary code execution as NT AUTHORITY\SYSTEM. T...

Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables

Source: https://code.google.com/p/google-security-research/issues/detail?id=554 The attached PEncrypt packed executable causes an OOB write on Avast Server Edition. gdb bt 0 0xf6f5e64a in EmulatePolyCodePOLYINFO, int from /proc/self/cwd/defs/15092301/engine.so 1 0xf6f7d334 in...

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps CmdExtract::ExtractCurrentFile should sanity check Arc.FileHead.UnpSize earl...

Avast! - JetDb::Ised4x Performs Unbounded Search on Input

Avast! - JetDb::Ised4x Performs Unbounded Search on Input Source: https://code.google.com/p/google-security-research/issues/detail?id=551 The attached Microsoft Access Database causes JetDb::IsExploited4x to be called, which contains an unbounded search for objects. Proof of Concept:...

Avast! - Integer Overflow Verifying numFonts in TTC Header

Avast! - Integer Overflow Verifying numFonts in TTC Header Source: https://code.google.com/p/google-security-research/issues/detail?id=549 If the numFonts field in the TTC header is greater than SIZEMAX+1 / 4, an integer overflow occurs in filevirusttf when calling CSafeGenFile::SafeLockBuffer. T...

Avast Antivirus X.509 Certificate Remote Code Execution Vulnerability

Avast Antivirus is a suite of antivirus programs. Avast Antivirus handles X.509 certificates with a security vulnerability that allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

MacOS X 10.11 Hardlink Resource Exhaustion

/ MacOS X 10.11 hardlink bomb cause resource exhaustion Avast PoC Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: zip, tar, find - AntiVirus: Avast, Eset32 Let's back to an old bug, which Apple does not patch until...

Avast-0 Directory Traversal Vulnerability

Avast is a suite of antivirus software from the Czech company Avast Avast. A directory traversal vulnerability exists in versions prior to Avast 150918-0. This allows remote attackers to delete or write arbitrary files via crafted entries in ZIP archives, deletion or writing...

CVE-2015-5662

Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive...

Directory traversal

Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive...

CVE-2015-5662

Avast Antivirus is affected by a directory traversal vulnerability (CVE-2015-5662) in how it processes ZIP archives. In affected builds prior to Virus Definition 150918-0, an unauthenticated remote attacker can craft a ZIP that, when processed, causes deletion or writing of arbitrary files on the...