OSVDB ID: 47212

Title: AVG Anti-Virus Crafted UPX File Handling Divide-by-zero Remote DoS

Info

Disclosure

Jul 28, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jul 25, 2008

Description

AVG Anti-Virus contains a flaw that may allow a remote denial of service. The issue is triggered when a divide-by-zero error occurs when processing specially crafted UPX executables, and will result in loss of availability for the scanning engine.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Security Software

Solution

Upgrade to version 8.0.156 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Grisoft

AVG Anti-Virus

8.0.138

References

Credit

  • Sergio ‘shadown’ Alvarez - security(at)nruns.com - n.runs


Direct URL: http://osvdb.org/47212