Ahnlab V3 Antivirus ACE Archive Handling Remote Buffer Overflow Vulnerability
BID:14844
Info
Ahnlab V3 Antivirus ACE Archive Handling Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 14844 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 15 2005 12:00AM |
| Updated: | Sep 15 2005 12:00AM |
| Credit: | Discovery is credited to Tan Chew Keong, Secunia Research. |
| Vulnerable: |
Ahnlab V3Pro 2004 6.0 .0.383 Ahnlab V3Net for Windows Server 6.0 6.0 .0.383 Ahnlab V3 VirusBlock 2005 6.0 .0.383 |
| Not Vulnerable: | |
Discussion
Ahnlab V3 Antivirus ACE Archive Handling Remote Buffer Overflow Vulnerability
Ahnlab V3 Antivirus products are affected by a remote buffer overflow vulnerability when handling ACE archives.
An attacker may exploit this vulnerability to gain unauthorized remote access in the context of SYSTEM.
AhnLab V3Pro 2004 Build 6.0.0.383, AhnLab V3 VirusBlock 2005 Build 6.0.0.383, and AhnLab V3Net for Windows Server 6.0 Build 6.0.0.383 are reported to be vulnerable. Other versions may be affected as well.
Ahnlab V3 Antivirus products are affected by a remote buffer overflow vulnerability when handling ACE archives.
An attacker may exploit this vulnerability to gain unauthorized remote access in the context of SYSTEM.
AhnLab V3Pro 2004 Build 6.0.0.383, AhnLab V3 VirusBlock 2005 Build 6.0.0.383, and AhnLab V3Net for Windows Server 6.0 Build 6.0.0.383 are reported to be vulnerable. Other versions may be affected as well.
Exploit / POC
Ahnlab V3 Antivirus ACE Archive Handling Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Ahnlab V3 Antivirus ACE Archive Handling Remote Buffer Overflow Vulnerability
Solution:
The vendor has released Build version 6.0.0.457 to address this issue. Users are advised to upgrade through the online update functionality of the application.
Solution:
The vendor has released Build version 6.0.0.457 to address this issue. Users are advised to upgrade through the online update functionality of the application.
References
Ahnlab V3 Antivirus ACE Archive Handling Remote Buffer Overflow Vulnerability
References:
References:
- Ahnlab Home Page (Ahnlab)
- Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities (Secunia Research