CVE-2007-2846

Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."...

CVE-2007-2846

CVE-2007-2846 affects avast! Anti-Virus Managed Client prior to 4.7.700, where the SIS unpacker is vulnerable to a heap-based overflow caused by an integer cast around. A crafted SIS archive may enable user-assisted remote code execution. The connected Nessus entry also notes a CAB/SIS processing...