Sophos Anti-Virus Bugs in Processing Petite Archives, RAR Archives, and CHM Files Let Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1017132
|
|
SecurityTracker URL: http://securitytracker.com/id?1017132
|
|
CVE Reference: CVE-2006-4839
, CVE-2006-5645
, CVE-2006-5646
, CVE-2006-5647
(Links to External Site)
|
Updated: Dec 8 2006
|
Original Entry Date: Oct 30 2006
|
Impact: Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Description: Several vulnerabilities were reported in Sophos Anti-Virus. A remote user can cause denial of service conditions.
A remote user can create a specially crafted file that, when processed by the target user's Sophos Anti-Virus software, will cause
denial of service conditions on the target system.
A specially crafted Petite archive containing a large number of large sectors
can trigger a flaw in the Petite Plugin and cause denial of service conditions [CVE-2006-4839].
A specially crafted RAR file
can cause the scanning engine to enter an infinite loop, consuming excessive CPU resources [CVE-2006-5645].
A specially crafted
CHM file can trigger a heap overflow and cause a memory corruption error [CVE-2006-5646, CVE-2006-5647]. It may be possible to
cause arbitrary code to be executed.
The vendor credits iDefense with reporting these vulnerabilities.
|
Impact: A remote user can create a file that, when processed, will cause denial of service conditions.
It may be possible to cause arbitrary code to be executed.
|
Solution: The vendor has issued fixed versions. A patch matrix is available in the vendor's advisory.
The Sophos advisory is available at:
http://www.sophos.com/support/knowledgebase/article/7609.html
|
Vendor URL: www.sophos.com/support/knowledgebase/article/7609.html (Links to External Site)
|
Cause: Boundary error, Exception handling error, State error
|
Underlying OS: Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Mon, 30 Oct 2006 08:56:10 -0500
Subject: Sophos Anti-Virus vulnerabilities
|
http://www.sophos.com/support/knowledgebase/article/7609.html
|
|
