CVE-2006-5939

The provided connected documents do not include concrete technical details (affected product versions, root cause, or remediation) for CVE-2006-5939. Public technical specifics are not available here; monitor for official disclosures and updates.

CVE-2006-5939

Grisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause a denial of service crash via a crafted DOC file that triggers a divide-by-zero error. NOTE: some of these details are obtained from third party information...

CVE-2006-5937

CVE-2006-5937 relates to multiple integer overflows in Grisoft AVG Anti-Virus prior to 7.1.407. The vulnerability allows remote attackers to execute arbitrary code by supplying crafted CAB or RAR archives that trigger a heap-based buffer overflow. Publicly included references note this involves r...

CVE-2006-5938

CVE-2006-5938 affects Grisoft AVG Anti-Virus before 7.1.407. The vulnerability is described as involving an uninitialized variable and a crafted CAB file, with the initial description indicating an unknown impact. The connected documents confirm the affected product and the basic cause but do not...

CVE-2006-5940

Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" and parsing of .EXE files...

AVG Anti-Virus多个远程代码执行漏洞

AVG Anti-Virus是一款功能完备的杀毒软件。 AVG Anti-Virus的文件解析引擎存在多个漏洞，目前已确定的漏洞包括： - 解析.CAB文件时的整数溢出可能导致堆溢出； - 解析.CAB文件时未初始化变量； - 解析.DOC文件时会分隔为0； - 解析.RAR文件时的整数溢出可能导致堆溢出； - 解析.EXE文件时存在整数问题。 如果攻击者创建了特制文件的话，这些漏洞就可能导致远程执行任意代码。 Grisoft AVG Anti-Virus 7.1.407 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[Full-disclosure] AVG Anti-Virus - Arbitrary Code Execution (remote)

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.002 13-Nov-2006 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Arbitrary Code Execution remote Vendor communication: 2006/08/24 initial notification to Grisoft Inc. 2006/08/24 Grisoft Inc. Respon...

CVE-2006-1125

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including 1 updvers.cfg, 2 incavi.avm, and 3 unspecified drivers, which might allow local users to gain privileges...

Design/Logic Flaw

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including 1 updvers.cfg, 2 incavi.avm, and 3 unspecified drivers, which might allow local users to gain privileges...

CVE-2006-1125

This CVE affects Grisoft AVG Free 7.1 (and earlier 7.0.308) where update-related files (upd_vers.cfg, incavi.avm, and some unspecified drivers) can be granted Everyone/Full Control. The underlying issue is that these files are writable by all users, potentially enabling local privilege escalation...

CVE-2006-1125

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including 1 updvers.cfg, 2 incavi.avm, and 3 unspecified drivers, which might allow local users to gain privileges...

CVE-2005-3234

Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip,...

CVE-2005-3234

The CVE-2005-3234 entry describes a vulnerability in Grisoft AVG Antivirus (unspecified versions) caused by a multiple interpretation error in a specially crafted RAR file with malformed central and local headers. This flaw can allow remote attackers to bypass virus detection despite the RAR bein...

CVE-2005-3234

Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip,...