Vba32 Personal Antivirus Archive Parsing Denial of Service Vulnerability

Bugtraq ID:	31560
Class:	Design Error
CVE:	CVE-2008-5667
Remote:	Yes
Local:	No
Published:	Oct 03 2008 12:00AM
Updated:	Apr 16 2015 05:53PM
Credit:	Gjoko 'LiquidWorm' Krstic
Vulnerable:	VirusBlokAda Vba32 Personal 3.12.8
Not Vulnerable:

Vba32 Personal Antivirus Archive Parsing Denial of Service Vulnerability

Vba32 Personal Antivirus is prone to a denial-of-service vulnerability caused by an unspecified memory-corruption error.

Attackers can exploit this issue to cause the application to crash, denying service to legitimate users. This may aid attackers in launching further attacks while the security application is not running.

Versions of Vba32 Personal Antivirus in the 3.12.8 branch are vulnerable; other versions may also be affected.

Vba32 Personal Antivirus Archive Parsing Denial of Service Vulnerability

The following example archive is available:

• /data/vulnerabilities/exploits/2008-vba32_poc.rar

Vba32 Personal Antivirus Archive Parsing Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Vba32 Personal Antivirus Archive Parsing Denial of Service Vulnerability

References:

• Vba32 Personal Antivirus Homepage (VirusBlokAda)