Symantec UPX Parsing Engine Heap Overflow

SUMMARY Symantec resolved a potential remote access compromise vulnerability reported by ISS X-Force. The vulnerability was identified in an early version of a Symantec antivirus scanning module responsible for parsing UPX compressed files that is still in limited use in some Symantec security...

CVE-2005-0249

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header...

CVE-2005-0249

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header...

CVE-2005-0249

Concretely affected: Symantec AntiVirus/Scan Engine DEC2EXE parsing engine (DEC2EXE.dll) used in the Symantec Antivirus Library. Issue: a heap-based buffer overflow caused by improper bounds checking when parsing UPX-compressed files, triggered by a crafted UPX file with a negative virtual offset...

Immunity Canvas: NORTON_UPX

Name| nortonupx ---|--- CVE| CVE-2005-0249 Exploit Pack| CANVAS Description| nortonupx Notes| CVE Name: CVE-2005-0249 Found by: Alex Wheeler VENDOR: Symantec URL: http://xforce.iss.net/xforce/alerts/id/187 VersionsAffected: Any 2004 Repeatability: This is a one shot exploit, but the process won't...

AVG Scanning Engine UPX Parsing Denial of Service Vulnerability

Binary data 5021.prm...

CVE-2001-1149

Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service crash when a user selects an action for a malformed UPX packed executable file...

CVE-2001-1149

Panda Antivirus Platinum before 6.23.00 is affected. Affects handling of malformed UPX-packed executables; triggering a denial of service (crash) when a user selects an action for such files. The available sources (NVD/CVE records) confirm the product/version and impact but do not provide exploit...