PT-2005-4095 · Ahnlab · Myv3+2

Tan Chew Keong · Publicado 2005-10-23 · Atualizado 2008-09-05 · CVE-2005-3284

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AhnLab V3 AntiVirus V3Pro versions prior to 6.0.0.488 AhnLab V3Net for Windows Server versions prior to 6.0.0.488 MyV3 (affected versions not specified)

Description The issue is related to multiple buffer overflows that can be triggered when scanning compressed files. This can be exploited by remote attackers to execute arbitrary code through crafted archives, including ALZ, UUE, or XXE archives.

Recommendations For AhnLab V3 AntiVirus V3Pro versions prior to 6.0.0.488, update to version 6.0.0.488 or later. For AhnLab V3Net for Windows Server versions prior to 6.0.0.488, update to version 6.0.0.488 or later. For MyV3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-3284

Produtos afetados

Ahnlab V3 Antivirus V3Pro

Ahnlab V3Net For Windows Server

Myv3

Referências · 8

• 🔥 http://secunia.com/secunia_research/2005-48/advisory · Exploit
• http://securityreason.com/securityalert/80 · Nota
• http://osvdb.org/19955 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3284 · Nota de Segurança
• http://securityfocus.com/bid/15091 · Nota
• http://global.ahnlab.com/security/security_advisory002.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/413260 · Nota
• http://secunia.com/advisories/16851 · Aviso do Fabricante