avast! Home/Professional TAR File Handling Remote Heap Overflow Vulnerability

Bugtraq ID:	26702
Class:	Boundary Condition Error
CVE:	CVE-2007-6265
Remote:	Yes
Local:	No
Published:	Dec 04 2007 12:00AM
Updated:	Dec 12 2007 09:22PM
Credit:	Sowhat of Nevis Labs is credited with the discovery of this issue.
Vulnerable:	Avast Antivirus Professional Edition 4.7.1043 Avast Antivirus Professional Edition 4.7.844 Avast Antivirus Professional Edition 4.7.827 Avast Antivirus Professional Edition 4.6.691 Avast Antivirus Professional Edition 4.6.665 Avast Antivirus Professional Edition 4.6.652 Avast Antivirus Professional Edition 4.6.603 Avast Antivirus Professional Edition 4.6 Avast Antivirus Professional Edition 4.0 Avast Antivirus Home Edition 4.7.1043 Avast Antivirus Home Edition 4.7.869 Avast Antivirus Home Edition 4.7.844 Avast Antivirus Home Edition 4.7.827 Avast Antivirus Home Edition 4.6.691 Avast Antivirus Home Edition 4.6.691 Avast Antivirus Home Edition 4.6.665 Avast Antivirus Home Edition 4.6.655 Avast Antivirus Home Edition 4.6.652 Avast Antivirus Home Edition 4.6 Avast Antivirus Home Edition 4.0
Not Vulnerable:	Avast Antivirus Professional Edition 4.7.1098 Avast Antivirus Home Edition 4.7.1098

avast! Home/Professional TAR File Handling Remote Heap Overflow Vulnerability

avast! is prone to a remote heap-overflow vulnerability.

This issue occurs when the application handles a malicious TAR file.

Versions prior to avast! Home and Professional 4.7.1098 are affected.

avast! Home/Professional TAR File Handling Remote Heap Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

avast! Home/Professional TAR File Handling Remote Heap Overflow Vulnerability

Solution:
The vendor released avast! Home/Professional 4.7.1098 to address this issue. Please see the references for more information.