543 matches found
F-PROT Antivirus ACE/CHM远程拒绝服务及溢出漏洞
F-PROT Antivirus是一款反病毒应用程序。 F-PROT Antivirus解析ACE/CHM档存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，绕过检测。 当解析特殊构建的ACE档时会造成无限循环而产生拒绝服务攻击。 当解析特殊构建的CHM档时可造成堆溢出。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 升级到最新程序F-Prot 4.6.7: http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof o...
trivial proof of concept code for F-Prot 4.6.6 .CHM heap overflow
No description provided by source. fprot2.py - trivial proof of concept code for F-Prot 4.6.6 .CHM heap overflow Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright...
fprot-dos.txt
Name: F-Prot Antivirus for Unix: heap overflow and Denial of Service Vendor: http://www.f-prot.com Release date: 4 Dec, 2006 URL: http://gleg.net/fprot.txt Author: Evgeny Legerov I. DESCRIPTION Two vulnerabilities in F-Prot Antivirus 4.6.6 for Unix platforms could allow a remote attacker to cause...
F-Prot antivirus buffer overflow
Buffer overflow on parsing CHM and ACE files...
CVE-2006-6293
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...
CVE-2006-6293
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...
EUVD-2006-6276
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...
CVE-2006-5647
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk...
CVE-2006-5646
Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service memory corruption via a CHM file with an LZX...
CVE-2006-5647
The CVE-2006-5647 issue affects Sophos Anti-Virus/Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and older platforms before 4.11. It is a CHM chunk header memory-corruption vulnerability triggered by malformed CHM files with a large name length; remote attackers could cause m...
CVE-2006-5647
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk...
CVE-2006-5646
Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service memory corruption via a CHM file with an LZX...
[SA22591] Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities
TITLE: Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA22591 VERIFY ADVISORY: http://secunia.com/advisories/22591/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Sophos Anti-Virus for Windows 6.x http://secunia.com/product/12449/ Soph...
Clam Anti-Virus CHM解包器拒绝服务漏洞
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV在处理CHM文件的解包时存在安全漏洞，远程攻击者可能利用此漏洞导致ClamAV崩溃。 在处理畸形文件时，ClamAV chmunpack.c中的代码可能试图读取无效的内存位置，导致扫描服务异常终止。 ClamAV ClamAV 0.88.4 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1196-1）以及相应补丁: DSA-1196-1：New clamav packages fix arbitrary code execution...
Debian DSA-1196-1 : clamav - several vulnerabilities
Several remote vulnerabilities have been discovered in the ClamAV malware scan engine, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4182 Damian Put discovered a heap overflow error in the script ...
Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC
No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...
FreeBSD : clamav -- CHM unpacker and PE rebuilding vulnerabilities (8012a79d-5d21-11db-bb8d-00123ffe8333)
Secunia reports : Two vulnerabilities have been reported in Clam AntiVirus, which potentially can be exploited by malicious people to cause a DoS Denial of Service or compromise a vulnerable system. 1 An unspecified error in the CHM unpacker in chmunpack.c can be exploited to cause a DoS. 2 An...
[SECURITY] [DSA 1196-1] New clamav packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1196-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 19th, 2006 http://www.debian.org/security/faq -...
Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability
Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability iDefense Security Advisory 10.15.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 15, 2006 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. The main purpose of which is integration into electronic ma...
