PT-2017-11443 · Antiy · Antiy Antivirus Engine

Maodou · Publicado 2017-07-02 · Atualizado 2017-07-07 · CVE-2017-10706

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Antiy Antivirus Engine versions prior to 5.0.0.05171547

Description The issue occurs when the Antiy Antivirus Engine scans a specially crafted ZIP archive, leading to a stack-based buffer overflow due to the use of a fixed path length. This results in the engine crashing.

Recommendations For versions prior to 5.0.0.05171547, update to version 5.0.0.05171547 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-10706

Produtos afetados

Antiy Antivirus Engine

Referências · 2

• 🔥 http://lofter.com/lpost/1d52afc9_105e13e5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-10706 · Nota de Segurança