Kaspersky Antivirus DoS - security vulnerabilities database

[EN] securityvulns.ru
no-pyccku

Kaspersky Antivirus DoS
Published: 02.03.2007
Source: BUGTRAQ
SecurityVulns ID: 7335
Type: remote
Level: 6/10
Description: Infinite loop on unpacking UPX-packed executable file.

Affected: KASPERSKY : Kaspersky Antivirus 6.0
KASPERSKY : Kaspersky Internet Security 6.0
CVE: CVE-2007-1281 (Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.)

Original document IDEFENSE, iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability (02.03.2007)

Discuss: Read or add your comments to this news (0 comments)