HTTP: Avast! Antivirus LHA Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Avast! Antivirus Engine. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Avast! antivirus engine is prone to a buffer-overflow vulnerability in its LHA processing routines. A successful attack can allow a remote attacker to corrupt process memory by triggering an overflow condition in the LHA processing engine. This may lead to arbitrary code execution in the context of applications that use the vulnerable engine. This may result in a full computer compromise. Applications that use versions of Avast! antivirus engine earlier than 4.7.869 (for desktops) or 4.7.660 (for servers) are vulnerable to this issue.

Affected Products

Netwin surgemail

References

BugTraq: 19903

CVE: CVE-2006-4626

Short Name

HTTP:STC:DL:AVAST-LHA

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Avast! Antivirus LHA Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?