Alwil Software Avast! Antivirus Multiple Vulnerabilities

Bugtraq ID:	14342
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 21 2005 12:00AM
Updated:	Jul 21 2005 12:00AM
Credit:	Discovery is credited to Tan Chew Keong with Secunia Research.
Vulnerable:	Avast Antivirus Server Edition 4.6.460 Avast Antivirus Professional Edition 4.6.665 Avast Antivirus Managed Client Avast Antivirus Home Edition 4.6.665
Not Vulnerable:	Avast Antivirus Server Edition 4.6.489 Avast Antivirus Professional Edition 4.6.691 Avast Antivirus Managed Client 4.6.394 Avast Antivirus Home Edition 4.6.691

Alwil Software Avast! Antivirus Multiple Vulnerabilities

Avast! is affected by multiple remote vulnerabilities. These issues can allow an attacker to write files to arbitrary directories and exploit a remote buffer overflow to execute arbitrary code.

These issues can lead to a complete compromise of the vulnerable computer.

Alwil Software Avast! Antivirus Multiple Vulnerabilities

The first issue does not require an exploit.

Currently we are not aware of any exploits for the buffer overflow issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Alwil Software Avast! Antivirus Multiple Vulnerabilities

Solution:
The vendor has released upgrades to address these issues. Please contact the vendor to obtain fixed packages.

Alwil Software Avast! Antivirus Multiple Vulnerabilities

References:

• avast! Antivirus ACE File Handling Two Vulnerabilities (Secunia)
  
• Urgent from Sybase/Financial Fusion: A possible issue exists with the Consumer B (Sybase)