Avast! Antivirus 'filevirus_ttf()' function remote integer overflow vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A remote integer overflow vulnerability exists in the Avast! Antivirus 'filevirusttf' function, which could be exploited by an attacker to crash an application or execute arbitrary code...

Avast! - Integer Overflow Verifying numFonts in TTC Header

Avast! - Integer Overflow Verifying numFonts in TTC Header Source: https://code.google.com/p/google-security-research/issues/detail?id=549 If the numFonts field in the TTC header is greater than SIZEMAX+1 / 4, an integer overflow occurs in filevirusttf when calling CSafeGenFile::SafeLockBuffer. T...