jueves, 1 de diciembre de 2005

Panda Antivirus ZOO Archive Decompression Buffer Overflow

Seguridad
Vulnerabilidades, Antivirus
Fuente: Secunia - Advisories -
Ref: Alex Wheeler
(4 referencias en news.google - antivirus @ english - Ranking=1 - Noticia Destacada = 1)

The vulnerability is caused due to a boundary error in "pskcmp.dll" when performing Lempel-Ziv decompression of ZOO archives. This can be exploited to cause a heap-based buffer overflow and may allow arbitrary code execution when a malicious ZOO archive is scanned.

No hay comentarios: