Kokanin

**Name of the Vulnerable Software and Affected Versions** F-Prot Antivirus version 6.2.1 4252 **Description** The issue is related to the scanning engine, which can be exploited by remote attackers to cause a denial of service, resulting in an infinite loop. This is achieved by sending a malformed ZIP archive, likely due to invalid offsets. **Recommendations** For F-Prot Antivirus version 6.2.1 4252, consider updating to a newer version that addresses this issue, as the current version allows for a denial of service attack via a malformed ZIP archive. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: mcweject version 0.9 Description: A buffer overflow issue exists in the eject.c component of mcweject, potentially allowing local users to execute arbitrary code by providing a long command line argument, possibly related to the device name. Recommendations: For mcweject version 0.9, consider applying a patch or fix to address the buffer overflow issue in eject.c to prevent potential code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco IP Phone 7940 **Description** The issue allows remote attackers to cause a denial of service, resulting in a reboot of the device, by sending a large amount of TCP SYN packets to arbitrary ports. **Recommendations** For Cisco IP Phone 7940, consider implementing network traffic filtering to restrict incoming TCP SYN packets to authorized sources as a temporary mitigation measure.

Name of the Vulnerable Software and Affected Versions: youbin (affected versions not specified) Description: The issue is related to a buffer overflow that allows local users to gain privileges. This is achieved by setting a long HOME environment variable. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.