Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability
BID:25015
Info
Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability
| Bugtraq ID: | 25015 |
| Class: | Unknown |
| CVE: |
CVE-2007-3951 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 23 2007 12:00AM |
| Updated: | May 07 2015 05:36PM |
| Credit: | Sergio Alvarez of n.runs AG is credited with the discovery of this vulnerability. |
| Vulnerable: |
Norman Virus Control 5.90 |
| Not Vulnerable: | |
Discussion
Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability
Norman Virus Control is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to execute arbitrary code with the privileges of the application. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will likely result in denial-of-service conditions.
This issue affects Virus Control 5.90; other versions may also be vulnerable.
Norman Virus Control is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker can exploit this issue to execute arbitrary code with the privileges of the application. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will likely result in denial-of-service conditions.
This issue affects Virus Control 5.90; other versions may also be vulnerable.
Exploit / POC
Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability
References:
References: