PT-2007-4150 · Avast · Avast! Anti-Virus Managed Client

Publicado 2007-05-24 · Atualizado 2018-10-16 · CVE-2007-2846

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions avast! Anti-Virus Managed Client versions prior to 4.7.700

Description The issue is related to a heap-based buffer overflow in the SIS unpacker, which can be exploited by user-assisted remote attackers. This is caused by an "integer cast around" and can be triggered via a crafted SIS archive, potentially allowing the execution of arbitrary code.

Recommendations For versions prior to 4.7.700, update to version 4.7.700 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-2846

Produtos afetados

Avast! Anti-Virus Managed Client

Referências · 10

• http://nruns.com/advisories/%5Bn.runs-SA-2007.009%5D%20-%20Avast%21%20Antivirus%20SIS%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt · Nota
• http://securityfocus.com/bid/24155 · Nota
• http://vupen.com/english/advisories/2007/1935 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2846 · Nota de Segurança
• http://securityfocus.com/archive/1/469585/100/0/threaded · Nota
• http://marc.info/?l=full-disclosure&m=118007660813710&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34501 · Nota
• http://kb.cert.org/vuls/id/125868 · Nota
• http://osvdb.org/36522 · Nota
• http://avast.com/eng/adnm-management-client-revision-history.html · Nota