Design/Logic Flaw

Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a...

CVE-2009-1783

CVE-2009-1783 affects FRISK Software F-Prot antivirus products (Windows and Linux variants as listed by OpenVAS) and enables a remote attacker to bypass malware detection through a crafted CAB archive. The OpenVAS entries specifically label it a Security Bypass vulnerability in F-Prot for Windows...

CVE-2009-1783: Improper Input Validation

Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a...

F-PROT antivirus 6.2.1.4252 (malformed archive) Infinite Loop DoS Exploit

No description provided by source. $ /opt/f-prot/fpscan snot.zip F-PROT Antivirus version 6.2.1.4252 built: 2008-04-28T16-44-10 FRISK Software International C Copyright 1989-2007 Engine version: 4.4.4.56 Virus signatures: 200806021748d9e53873896ea96bd4e8a470344c25b5 /opt/f-prot/antivir.def...

n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote)

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2008.002 16-Jul-2008 Vendor: FRISK F-Prot, http://www.f-prot.com Affected Products: F-Prot Anti-Virus all platforms Vulnerability: Out-of-Bound Memory Access DoS remote Risk: HIGH Vendor communication: 2008/01/22 initial notification t...

CVE-2006-6352

FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service infinite loop via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...

CVE-2006-6352

CVE-2006-6352 relates to FRISK Software F-Prot Antivirus prior to 4.6.7. OpenVAS/Gentoo GLSA-200612-12 describe a vulnerability where a crafted ACE file can cause a denial of service via an infinite loop, with mentions of a heap-based buffer overflow and possible overlap with CVE-2006-6294/6293. ...

CVE-2006-6352: Undefined Security Weakness

FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service infinite loop via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...

CVE-2006-6293

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...

CVE-2006-6294

CVE-2006-6294 covers multiple vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7. Connected sources (GLSA 200612-12, NVD entries) specify a heap-based buffer overflow and other unspecified issues in F-Prot, with CVE-2006-6293 describing a separate heap-based overflow via a crafted CH...

CVE-2006-6293

FRISK Software F-Prot Antivirus prior to version 4.6.7 is affected by a heap-based buffer overflow that can be triggered by a crafted CHM file, enabling a user-assisted remote attacker to execute arbitrary code. The issue exists in the current CVE-2006-6293 entry and has a noted overlap with CVE-...

CVE-2006-6294

Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. NOTE: this might be related to CVE-2006-6293, but it is not clear due to the vagueness of the report...

CVE-2006-6294: Undefined Security Weakness

Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. NOTE: this might be related to CVE-2006-6293, but it is not clear due to the vagueness of the report...

CVE-2006-6293: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...