AVG Anti-Virus UPX File Parsing Denial of Service Vulnerability

Bugtraq ID:	30417
Class:	Design Error
CVE:	CVE-2008-3373
Remote:	Yes
Local:	No
Published:	Jul 28 2008 12:00AM
Updated:	May 07 2015 05:25PM
Credit:	Sergio Alvarez
Vulnerable:	AVG AVG Anti-Virus 8.0
Not Vulnerable:	AVG AVG Anti-Virus 8.0.156

AVG Anti-Virus UPX File Parsing Denial of Service Vulnerability

AVG Anti-Virus is prone to a denial-of-service vulnerability.

Exploiting this issue may allow attackers to crash AVG Anti-Virus and deny service to legitimate users of the application.

Versions prior to AVG Anti-Virus 8.0.156 are vulnerable.

AVG Anti-Virus UPX File Parsing Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AVG Anti-Virus UPX File Parsing Denial of Service Vulnerability

Solution:
The vendor has released an update and an advisory. Please see the references for more information.

AVG Anti-Virus UPX File Parsing Denial of Service Vulnerability

References:

• AVG - Program update AVG 8.0.156 (AVG)
  
• AVG Anti-Virus Homepage (AVG)
  
• n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote) (n.runs)
  
• n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote) ()