Dr. Web Anti-Virus LHA Archive Heap Buffer-Overflow Vulnerability

Bugtraq ID:	20119
Class:	Boundary Condition Error
CVE:	CVE-2006-4438
Remote:	Yes
Local:	No
Published:	Sep 20 2006 12:00AM
Updated:	Sep 21 2006 12:41AM
Credit:	Jean-Sébastien Guay-Leroux is credited with the discovery of this vulnerability.
Vulnerable:	Dr.Web Dr. Web Anti-Virus 4.33
Not Vulnerable:

Dr. Web Anti-Virus LHA Archive Heap Buffer-Overflow Vulnerability

Dr. Web Anti-Virus is prone to a heap buffer-overflow vulnerability because it fails to perform sufficient bounds checking on LHA archive data before copying it to a finite-sized buffer.

Exploiting this issue could lead to denial-of-service conditions and to the execution of arbitrary machine code in the context of the application.

Dr.Web Anti-Virus Version 4.33 is vulnerable; other versions may also be affected.

Dr. Web Anti-Virus LHA Archive Heap Buffer-Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/20119.c

Dr. Web Anti-Virus LHA Archive Heap Buffer-Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Dr. Web Anti-Virus LHA Archive Heap Buffer-Overflow Vulnerability

References:

• Dr. Web Home Page (Dr. Web)