138 matches found
KLA10151 DoS vulnerability in F-Prot antivirus
An unspecified vulnerability was found in F-Prot antivirus. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely at a point related to the scanning engine. Original advisories Release notes Related products...
F-PROT Antivirus Engine < 4.4.4 Multiple File Handling DoS Vulnerabilities
The version of F-PROT Anti-Virus installed on the remote Windows host contains flaws in the way it handles CHM, UPX-compressed, ASPack-compressed and certain Microsoft office files. - A malformed CHM file containing '0xffffffff' in the 'nbdir' field could crash the application. - A malformed...
CVE-2008-3243: Improper Input Validation
Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via 1 a crafted UPX-compressed file, which triggers an engine crash; 2 a crafted Microsoft Office file, which triggers an infinite loop; ...
CVE-2008-3244: Improper Input Validation
The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service engine crash via a CHM file with a large nbdir value that triggers an out-of-bounds read...
n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote)
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2008.002 16-Jul-2008 Vendor: FRISK F-Prot, http://www.f-prot.com Affected Products: F-Prot Anti-Virus all platforms Vulnerability: Out-of-Bound Memory Access DoS remote Risk: HIGH Vendor communication: 2008/01/22 initial notification t...
F-Prot antivirus DoS
Out-of-bound memory access on CHM files parsing...
F-PROT杀毒软件CHM文件处理拒绝服务漏洞
BUGTRAQ ID: 30258 F-Prot Antivirus是一款UNIX平台上的杀毒软件。 F-Prot杀毒引擎在解析CHM文件头时存在拒绝服务漏洞，如果文件头的nbdir字段（根索引块的块数）值被设置为0xffffffff的话，指针计算就可能出现越界读取，导致拒绝服务的情况。 F-Prot Antivirus 4.4.4 F-Prot ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-prot.com/...
GLSA-200612-12 : F-PROT Antivirus: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200612-12 F-PROT Antivirus: Multiple vulnerabilities F-Prot Antivirus version 4.6.7 fixes a heap-based buffer overflow, an infinite loop, and other unspecified vulnerabilities. Impact : Among other weaker impacts, a remote attacke...
F-PROT Antivirus: Multiple vulnerabilities
Background F-Prot Antivirus is a FRISK Software antivirus program that can used with procmail. Description F-Prot Antivirus version 4.6.7 fixes a heap-based buffer overflow, an infinite loop, and other unspecified vulnerabilities. Impact Among other weaker impacts, a remote attacker could send an...
CVE-2006-6407
F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...
CVE-2006-6407
CVE-2006-6407 concerns F-Prot Antivirus for Linux x86 Mail Servers 4.6.6. The vulnerability allows remote attackers to bypass virus detection by injecting invalid characters into base64-encoded content within a multipart/mixed MIME file, demonstrated using the EICAR test file. This indicates a fl...
CVE-2006-6407
F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...
CVE-2006-6407: Undefined Security Weakness
F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...
trivial proof of concept code for F-Prot 4.6.6 .CHM heap overflow
No description provided by source. fprot2.py - trivial proof of concept code for F-Prot 4.6.6 .CHM heap overflow Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright...
F-PROT Antivirus ACE/CHM远程拒绝服务及溢出漏洞
F-PROT Antivirus是一款反病毒应用程序。 F-PROT Antivirus解析ACE/CHM档存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，绕过检测。 当解析特殊构建的ACE档时会造成无限循环而产生拒绝服务攻击。 当解析特殊构建的CHM档时可造成堆溢出。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 升级到最新程序F-Prot 4.6.7: http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof o...
Multiple Vendor Unusual MIME Encoding Content Filter Bypass
Several e-mail virus scanners can be tricked into passing an EICAR test file if the following conditions are met: 1. the EICAR file is encoded in Base64 including characters not in the standard alphabet e.g. whitespaces and 2. the part containing the EICAR file is nested within one or several...
trivial proof of concept code for F-Prot 4.6.6 .ACE DoS
No description provided by source. fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and...
CVE-2006-6352
FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service infinite loop via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...
CVE-2006-6352
FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service infinite loop via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...
CVE-2006-6352
CVE-2006-6352 relates to FRISK Software F-Prot Antivirus prior to 4.6.7. OpenVAS/Gentoo GLSA-200612-12 describe a vulnerability where a crafted ACE file can cause a denial of service via an infinite loop, with mentions of a heap-based buffer overflow and possible overlap with CVE-2006-6294/6293. ...