[security-alerts] FW: [SA25380] avast! CAB File Processing Buffer Overflow Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> avast! CAB File Processing Buffer Overflow Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA25380
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/25380/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> avast! Managed Client 4.x
> http://secunia.com/product/14330/
> avast! Server Edition 4.x
> http://secunia.com/product/11895/
> 
> DESCRIPTION:
> Sergio Alvarez has reported a vulnerability in avast!, which can be
> exploited by malicious people to compromise a vulnerable system.
> 
> The vulnerability is caused due to an error within the parsing of
> .CAB files and can be exploited to cause a heap-based buffer overflow
> via a specially crafted .CAB file.
> 
> Successful exploitation may allow execution of arbitrary code.
> 
> The vulnerability reportedly affects versions prior to 4.7.766 for
> servers and 4.7.700 for the Managed Client product.
> 
> SOLUTION:
> Update to the latest versions.
> http://www.avast.com/eng/download.html
> 
> PROVIDED AND/OR DISCOVERED BY:
> Sergio Alvarez, n.runs AG
> 
> ORIGINAL ADVISORY:
> avast!:
> http://www.avast.com/eng/adnm-management-client-revision-history.html
> http://www.avast.com/eng/avast-4-server-revision-history.html
> 
> Sergio Alvarez:
> http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/06
> 3566.html
>