CA杀毒引擎畸形CAB文件名远程栈溢出漏洞

Computer Associates是世界领先的安全厂商，产品包括多种杀毒软件及备份恢复系统。 多个CA产品的杀毒引擎在解析畸形内容的.CAB文档时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制系统， 软件包中vete.dll模块如果处理了.CAB文档中的超长文件名，就会触发这个溢出，导致执行任意指令。 Computer Associates BrightStor ARCserve Backup R11.5 Computer Associates BrightStor ARCserve Backup R11.1 Computer Associates BrightStor ARCserv...

CA Antivirus engine CAB handling buffer overflow

Added: 06/07/2007 CVE: CVE-2007-2864 BID: 24330 OSVDB: 35245 Background The CA Antivirus engine is included in multiple CA products. Problem A buffer overflow vulnerability in the CA Antivirus engine allows command execution when a CAB file containing a specially crafted "coffFiles" field is...

CA Antivirus engine CAB handling buffer overflow

Added: 06/07/2007 CVE: CVE-2007-2864 BID: 24330 OSVDB: 35245 Background The CA Antivirus engine is included in multiple CA products. Problem A buffer overflow vulnerability in the CA Antivirus engine allows command execution when a CAB file containing a specially crafted "coffFiles" field is...

Stack overflow

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA formerly Computer Associates products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file...

Stack overflow

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA formerly Computer Associates products allows remote attackers to execute arbitrary code via a long filename in a .CAB file...

CVE-2007-2863

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA formerly Computer Associates products allows remote attackers to execute arbitrary code via a long filename in a .CAB file...

CVE-2007-2863

CVE-2007-2863 is a stack-based buffer overflow in the CA Anti-Virus engine (and related CA products) caused by insufficient bounds checking on filenames in CAB archives. A remote attacker can trigger the overflow via a long filename in a CAB file, potentially executing arbitrary code. Affected pr...

CVE-2007-2864

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA formerly Computer Associates products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file...

CVE-2007-2863

Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA formerly Computer Associates products allows remote attackers to execute arbitrary code via a long filename in a .CAB file...

Computer Associates Anti-Virus engine fails to properly handle long file names in CAB archives

Overview The Computer Associates Anti-Virus engine contains a stack-based buffer overflow that may allow a remote, unauthenticated attacker to execute arbitrary code. Description The Computer Associates Anti-Virus engine contains a stack-based buffer overflow in the code responsible for processin...

Computer Associates Anti-Virus engine fails to properly handle malformed CAB archives

Overview The Computer Associates Anti-Virus engine contains a stack-based buffer overflow that may allow a remote, unauthenticated attacker to execute arbitrary code. Description The Computer Associates Anti-Virus engine contains a stack-based buffer overflow in the code responsible for processin...

[Full-disclosure] ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability

ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-034.html June 5, 2007 -- CVE ID: CVE-2007-2863 -- Affected Vendor: Computer Associates -- Affected Products: CA Anti-Virus eTrust EZ Antivirus CA Internet...

ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability

ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-035.html June 5, 2007 -- CVE ID: CVE-2007-2864 -- Affected Vendor: Computer Associates -- Affected Products: CA Anti-Virus eTrust EZ Antivirus CA Internet...

CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code onvulnerable installations of various Computer Associates products. The specific flaw exists within the processing of an improperly defined "coffFiles" field in .CAB archives. Large values result in an unbounded data copy...

CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of various Computer Associates products. The specific flaw exists in the parsing of .CAB archives. When a long filename contained in the .CAB is processed by vete.dll an exploitable stack overflow may...

Avast antivirus code execution

Code execution on CAB files parsing. Integer overflow on .SIS parsing...

Avast! Managed Client CAB文件处理远程堆溢出漏洞

Avast!是一款反病毒应用程序。 Avast! Managed Client处理CAB文件存在堆溢出问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Avast! Antivirus Managed Client 4.7.652 Avast! Antivirus Managed Client 4.6.394 厂商解决方案 升级到Avast! Managed Client 4.7.700版本： http://www.avast.com/eng/adnm-management-client-revision-history.html...

CVE-2007-2845

Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around"...

CVE-2007-2845

CVE-2007-2845 describes a heap-based overflow in the CAB unpacker of avast! Anti-Virus Managed Client (and Server Edition) prior to 4.7.700, caused by an integer cast around in CAB/SIS processing. A crafted CAB archive could allow an attacker to execute arbitrary code. The Nessus entry corroborat...

CVE-2007-2845

Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around"...