Debian: Security Advisory (DSA-1153)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : clamav (ZYPP Patch Number 1942)

This version update to 0.88.4 fixes among other things a security relevant buffer overflow in the UPX-Decoder. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Design/Logic Flaw

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4578

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4578

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4578

CVE-2007-4578 affects Sophos Anti-Virus for Windows and for Unix/Linux prior to 2.48.0. Vulnerability arises in handling of UPX-packed files due to an integer cast around, enabling a remote attacker to cause a crash (DoS) and, per some sources, potentially execute arbitrary code. Vendor note (as ...

Sophos Antivirus UPX及BZIP文件解析拒绝服务漏洞

BUGTRAQ ID: 25428 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos Anti-Virus在处理畸形格式的UPX和BZIP文件时存在漏洞，远程攻击者可能利用此漏洞导致应用程序不可用。 如果用户受骗打开了恶意的UPX压缩可执行文件或BZIP压缩文档的话，就可能触发死循环，导致引擎崩溃或临时文件耗尽所有磁盘空间。 Sophos Anti-Virus 2.48.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...

n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.027 24-Aug-2007 Vendor: Sophos, http://www.sophos.com Affected Products: Sophos Anti-Virus for Windows Sophos Anti-Virus for Unix/Linux Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2007/05/07...

Sophos Antivirus multiple security vulnerabilities

Infinite loop on bzip parsing, integer overflow on UPX parsing...

Sophos Anti-Virus UPX and BZIP File Multiple Vulnerabilities

The version of Sophos Anti-Virus installed on the remote host reportedly contains several problems involving the processing of 'UPX' and 'BZIP' files. If a remote attacker can cause a malicious file to be scanned by the affected application, these issues could be leveraged to crash the affected...

GDB Process_Coff_Symbol UPX文件缓冲区溢出漏洞

GDB是一款开放源代码的命令行调试工具。 GDB处理UPX文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于“coffread.c”解开UPX压缩的文件时存在边界错误，恶意的UPX文件诱使用户调试可导致以应用程序进程权限执行任意指令。 GNU GDB 6.6 目前没有详细解决方案提供： http://www.gnu.org/software/gdb/gdb.html 可参考如下测试文件： http://www.xwings.net/private/advisory/gdbupx.tar.bz2...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

Design/Logic Flaw

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2972

CVE-2007-2972 affects Avira AntiVir Antivirus (pre-7.04.00.24) where the file parsing engine mishandles UPX-compressed files, triggering a divide-by-zero and causing an application crash (DoS). The vulnerability is described as a denial-of-service via crafted UPX inputs. The available connected d...

Avira AntiVir File Handling Vulnerabilities

The remote host is running Avira AntiVir, an antivirus software application. The version of AntiVir installed on the remote host is reportedly prone to a buffer overflow in its LZH file processing code as well as denial of service vulnerabilities when parsing UPX and TAR files. An attacker may be...

Avira Antivir integer overflow

Integer overflow during .LZH archive parsing leads to buffer overflow. Devision by zero on UPX decoding. Infinite loop on TAR parsing...

CVE-2007-1591

VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to cause a denial of service kernel fault and system crash via a crafted UPX file with a certain field that triggers a divide-by-zero error...

Code injection

VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to cause a denial of service kernel fault and system crash via a crafted UPX file with a certain field that triggers a divide-by-zero error...

CVE-2007-1591

CVE-2007-1591 affects Trend Micro’s VsapiNT.sys in the Scan Engine 8.0 (Trend Micro Antivirus 14.10.1041 and similar products). A crafted UPX-packed file triggers a divide-by-zero error in VsapiNT.sys, causing a kernel fault and remote denial of service (system crash). Public references describe ...