PT-2005-4095 · Ahnlab · Myv3+2

Tan Chew Keong · Published 2005-10-23 · Updated 2008-09-05 · CVE-2005-3284

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AhnLab V3 AntiVirus V3Pro versions prior to 6.0.0.488 AhnLab V3Net for Windows Server versions prior to 6.0.0.488 MyV3 (affected versions not specified)

Description The issue is related to multiple buffer overflows that can be triggered when scanning compressed files. This can be exploited by remote attackers to execute arbitrary code through crafted archives, including ALZ, UUE, or XXE archives.

Recommendations For AhnLab V3 AntiVirus V3Pro versions prior to 6.0.0.488, update to version 6.0.0.488 or later. For AhnLab V3Net for Windows Server versions prior to 6.0.0.488, update to version 6.0.0.488 or later. For MyV3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-3284

Affected Products

Ahnlab V3 Antivirus V3Pro

Ahnlab V3Net For Windows Server

Myv3

References · 8

• 🔥 http://secunia.com/secunia_research/2005-48/advisory · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3284 · Security Note
• http://global.ahnlab.com/security/security_advisory002.html · Vendor Advisory
• http://secunia.com/advisories/16851 · Vendor Advisory
• http://securityreason.com/securityalert/80 · Note
• http://osvdb.org/19955 · Note
• http://securityfocus.com/bid/15091 · Note
• http://securityfocus.com/archive/1/413260 · Note