Design/Logic Flaw

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4578

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4577

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...

Design/Logic Flaw

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...

CVE-2007-4577

CVE-2007-4577 affects Sophos Anti-Virus for Unix/Linux prior to 2.48.0. A malformed BZip file can trigger an infinite loop, causing the Engine to create multiple temporary files and leading to a denial-of-service condition. The issue is triggered during processing of compressed input (BZip) and a...

CVE-2007-4577

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service infinite loop via a malformed BZip file that results in the creation of multiple Engine temporary files aka a "BZip bomb"...

CVE-2007-4578

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4578

CVE-2007-4578 affects Sophos Anti-Virus for Windows and for Unix/Linux prior to 2.48.0. Vulnerability arises in handling of UPX-packed files due to an integer cast around, enabling a remote attacker to cause a crash (DoS) and, per some sources, potentially execute arbitrary code. Vendor note (as ...

Sophos Antivirus UPX及BZIP文件解析拒绝服务漏洞

BUGTRAQ ID: 25428 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos Anti-Virus在处理畸形格式的UPX和BZIP文件时存在漏洞，远程攻击者可能利用此漏洞导致应用程序不可用。 如果用户受骗打开了恶意的UPX压缩可执行文件或BZIP压缩文档的话，就可能触发死循环，导致引擎崩溃或临时文件耗尽所有磁盘空间。 Sophos Anti-Virus 2.48.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...

Sophos Anti-Virus UPX and BZIP File Multiple Vulnerabilities

The version of Sophos Anti-Virus installed on the remote host reportedly contains several problems involving the processing of 'UPX' and 'BZIP' files. If a remote attacker can cause a malicious file to be scanned by the affected application, these issues could be leveraged to crash the affected...

Authentication flaw

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4242

CVE-2007-4242 affects the Pop3 Proxy in Astaro Security Gateway (ASG) 7 . The issue is that attachments exceeding the maximum allowed size are not scanned for viruses and are passed through, enabling a bypass of virus scanning. The connected documents confirm the affected component and the root c...

CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

Design/Logic Flaw

arclib.dll before 7.3.0.9 in CA Anti-Virus formerly eTrust Antivirus 8 and certain other CA products allows remote attackers to cause a denial of service infinite loop and loss of antivirus functionality via an invalid "previous listing chunk number" field in a CHM file...

CVE-2007-3875

arclib.dll before 7.3.0.9 in CA Anti-Virus formerly eTrust Antivirus 8 and certain other CA products allows remote attackers to cause a denial of service infinite loop and loss of antivirus functionality via an invalid "previous listing chunk number" field in a CHM file...

CVE-2007-3875

CVE-2007-3875 : A DoS in CA/ eTrust Antivirus products caused by arclib.dll when processing a malformed CHM file. An invalid “previous listing chunk number” in CHM triggers an infinite loop, halting antivirus functionality. Affected CA products include CA Anti-Virus for the Enterprise (formerly e...

CVE-2007-3875

arclib.dll before 7.3.0.9 in CA Anti-Virus formerly eTrust Antivirus 8 and certain other CA products allows remote attackers to cause a denial of service infinite loop and loss of antivirus functionality via an invalid "previous listing chunk number" field in a CHM file...

Norman Virus Control DOC文件解析拒绝服务漏洞

BUGTRAQ ID: 25014 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control在处理畸形格式的.DOC文件时存在漏洞，远程攻击者可能利用此漏洞导致程序不可用。 Norman Virus Control的文件解析引擎没有正确地解析.DOC OLE2文件，在解析计算时可能错误地将0用作除数，导致无法处理的异常，应用程序可能会崩溃。 Norman Virus Control = 5.90 Norman ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.norman.com/...

Norman Virus Control LZH及.ACE文件解析缓冲区溢出漏洞

BUGTRAQ ID: 25003,25015 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control的文件解析引擎没有正确的解析.LZH和.ACE文件，如果用户受骗打开了畸形的.LZH或.ACE文件的话，就可能触发缓冲区溢出，导致在用户系统上执行任意指令。 Norman Virus Control = 5.90 Norman ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.norman.com/...