CVE-2009-1783

CVE-2009-1783 affects FRISK Software F-Prot antivirus products (Windows and Linux variants as listed by OpenVAS) and enables a remote attacker to bypass malware detection through a crafted CAB archive. The OpenVAS entries specifically label it a Security Bypass vulnerability in F-Prot for Windows...

BitDefender CAB Scan Evasion

The remote version of BitDefender Antivirus is running with a signature update before April 13, 2009. Such versions are affected by a scan evasion vulnerability. An attacker can exploit this flaw to package malicious code in a specially crafted 'CAB' file so that it will not be detected by the sc...

ESET Antivirus CAB Scan Evasion

The ESET antivirus application installed on the remote host is affected by a scan evasion vulnerability due to the virus definitions being out of date. In this case, the virus signature database file version of the installed antivirus product is prior to 4036. An attacker can exploit this, by...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:003)

An integer overflow vulnerability was reported by iDefense with clamav when parsing Portable Executable PE files packed in he MEW format. This could be exploited to cause a heap-based buffer overflow CVE-2007-6335. Toeroek Edwin reported an off-by-one error when decompressing MS-ZIP compressed CA...

Mandriva Update for clamav MDVSA-2008:003 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:003 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Sophos Antivirus CAB文件解析拒绝服务漏洞

BUGTRAQ ID: 32748 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos在处理畸形格式的CAB文件时存在漏洞，如果启用了CAB文档扫描的话，则Sophos杀毒引擎检测到特制的CAB文档文件时就会触发分段错误，导致病毒扫描失败或杀毒引擎崩溃。 Sophos Anti-Virus for Linux 4.33 厂商补丁： Sophos ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...

CVE-2008-3156

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

CVE-2008-3156

The ActiveScan ActiveX Control as2guiie.dll in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet CAB files via unspecified URLs passed to the Update method...

Panda ActiveScan远程缓冲区溢出和任意CAB文件安装漏洞

BUGTRAQ ID: 30086 CNCAN ID：CNCAN-2008070802 Panda ActiveScan是一款病毒在线扫描程序。 Panda ActiveScan存在缓冲区溢出和CAB文件安装问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 Panda ActiveScan的升级函数对参数缺少检查，可导致典型的缓冲区溢出，并可以安装任意攻击者提供的CABinet到目标系统，导致任意代码或者程序执行。 Panda ActiveScan 2.0 升级到最新版本： http://www.pandasecurity.com/activescan/index/...

Authentication flaw

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive...

CVE-2008-0792

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive...

CVE-2008-0792

CVE-2008-0792 affects multiple F-Secure antivirus products (Internet Security 2006–2008, Anti-Virus 2006–2008, F-Secure Protection Service, and others). The vulnerability allows remote attackers to bypass malware detection by presenting a crafted CAB archive. The documents do not provide exploit ...

Debian Security Advisory DSA 1263-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1263-1. Several remote vulnerabilities have been discovered in in the Clam anti-virus toolkit, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems:...

GLSA-200712-20 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-20 ClamAV: Multiple vulnerabilities iDefense reported an integer overflow vulnerability in the cliscanpe function when parsing Portable Executable PE files packed in the MEW format, that could be exploited to cause a...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

Code injection

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-6336

CVE-2007-6336 is a ClamAV vulnerability (pre-0.92) caused by an off-by-one error when decompressing MS-ZIP CAB files. Remote attackers could execute arbitrary code by supplying a crafted CAB file. The issue is addressed by upgrading to ClamAV 0.92 or newer (per connected advisories noting fixes f...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-0447

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...