CVE-2004-1910

rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service crash via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is...

CVE-2004-1910

The CVE-2004-1910 entry concerns rufsi.dll in Symantec Virus Detection. A remote attacker can cause a denial of service (crash) by supplying a long string to the GetPrivateProfileString function. The issue was originally reported as a buffer overflow, but that claim is disputed by the vendor, tho...

CVE-2005-0668

The CVE-2005-0668 entry describes an issue in HTTP Anti Virus Proxy (HAVP) prior to version 0.51 where viruses are not properly detected in certain archive files (notably CAB and ZIP). Affected component: HAVP (HTTP proxy). Root cause: scanning failure for specific archive formats, enabling poten...

CVE-2005-0668

Unknown vulnerability in HTTP Anti Virus Proxy HAVP before 0.51 prevents viruses from being properly detected in certain files such as 1 .CAB or 2 .ZIP files...

CVE-2004-2276

F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which allows viruses such as Sober.D and Sober.G to bypass initial detection...

CVE-2004-1910

rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service crash via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is...

FreeBSD : p5-Archive-Zip -- virus detection evasion (134)

The following package needs to be updated: p5-Archive-Zip %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga5742055300a11d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyrigh...

GLSA-200411-06 : MIME-tools: Virus detection evasion

The remote host is affected by the vulnerability described in GLSA-200411-06 MIME-tools: Virus detection evasion MIME-tools doesn't correctly parse attachment boundaries with an empty name boundary=''. Impact : An attacker could send a carefully crafted email and evade detection on some email...

MIME-tools: Virus detection evasion

Background MIME-tools is a Perl module containing functions to handle MIME attachments. Description MIME-tools doesn't correctly parse attachment boundaries with an empty name boundary="". Impact An attacker could send a carefully crafted email and evade detection on some email virus-scanning...

Mandrake Linux Security Advisory : perl-Archive-Zip (MDKSA-2004:118)

Recently, it was noticed that several antivirus programs miss viruses that are contained in ZIP archives with manipulated directory data. The global archive directory of these ZIP file have been manipulated to indicate zero file sizes. Archive::Zip produces files of zero length when decompressing...

GLSA-200410-31 : Archive::Zip: Virus detection evasion

The remote host is affected by the vulnerability described in GLSA-200410-31 Archive::Zip: Virus detection evasion Archive::Zip can be used by email scanning software like amavisd-new to uncompress attachments before virus scanning. By modifying the uncompressed size of archived files in the glob...

MoonLit Virus Backdoor Detection

The system is infected by the MoonLit virus, the backdoor port is open. Backdoor.Moonlit is a Trojan horse program that can download and execute files, and may act as a proxy server. Copyright C 2004-2010 KK Liu rev 1.0: MoonLit detection - 07/30/2004 rev 1.1: Description changes rev 1.2: Bug fix...

Archive::Zip: Virus detection evasion

Background Archive::Zip is a Perl module containing functions to handle ZIP archives. Description Archive::Zip can be used by email scanning software like amavisd-new to uncompress attachments before virus scanning. By modifying the uncompressed size of archived files in the global header of the...

p5-Archive-Zip -- virus detection evasion

An AMaViS Security Announcement reports that a vulnerability exist in the Archive::Zip Perl module which may lead to bypass of malicious code in anti-virus programs by creating specially crafted ZIP files...

Avira Anti-Virus PDF File Scan Evasion

Binary data 5027.prm...

Trendmicro Officesscan privilege escalation

During virus detection help is launched from local system...

Sasser Virus Detection

The Sasser worm is infecting this host. Specifically, a backdoored command server may be listening on port 9995 or 9996 and an ftp server used to load malicious code is listening on port 5554 or 1023. There is every indication that the host is currently scanning and infecting other systems. C...

Symantec Security Check Virus Detection - COM Object Denial of Service

source: https://www.securityfocus.com/bid/10069/info Symantec Virus Detection is a web based service that detects viruses and trojan horses. It is a freely available service that can be run via Microsoft Internet Explorer, Netscape Communicator or Apple Safari web browsers. The...

[Full-Disclosure] Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow

Application: Symantec Virus DetectionFree ActiveX Vendors: http://security.symantec.com/sscv6/vcscan.asp?langid=ie&venid=sym&plfid=23&pkj=WJDORSJRFSKLUKUMXCC&vcscanstate=2 Platforms: Windows Bug: Buffer Overflow Risk: High - Running Arbitary Code Exploitation: Remote with browser Date: 1 Apr 2004...

Symantec Security Check Virus Detection - COM Object Denial of Service

Symantec Security Check Virus Detection - COM Object Denial of Service source: https://www.securityfocus.com/bid/10069/info Symantec Virus Detection is a web based service that detects viruses and trojan horses. It is a freely available service that can be run via Microsoft Internet Explorer,...