Info

Disclosure

Jul 28, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jul 25, 2008

Description

AVG Anti-Virus contains a flaw that may allow a remote denial of service. The issue is triggered when a divide-by-zero error occurs when processing specially crafted UPX executables, and will result in loss of availability for the scanning engine.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Security Software

Solution

Upgrade to version 8.0.156 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Grisoft

AVG Anti-Virus

8.0.138

References

Security Tracker: 1020570
CVE ID: 2008-3373 (see also: NVD)
Bugtraq ID: 30417
Secunia Advisory ID: 31290
SCIP VulDB ID: 3789
ISS X-Force ID: 44057
VUPEN Advisory: ADV-2008-2225
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-07/0270.html
Vendor URL: http://www.grisoft.com
Vendor Specific Advisory URL: http://www.grisoft.com/ww.94247
Vendor Specific News/Changelog Entry: http://www.grisoft.com/ww.94247
Other Advisory URL: http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt

Credit

Sergio ‘shadown’ Alvarez - security(at)nruns.com - n.runs

Direct URL: http://osvdb.org/47212