AVG Anti-Virus For Linux UPX File Parsing Denial of Service Vulnerability

Bugtraq ID:	32749
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 10 2008 12:00AM
Updated:	Dec 12 2008 07:12PM
Credit:	Jonathan Brossard from iViZ Techno Solutions
Vulnerable:	AVG AVG Anti-Virus for Linux 7.5.51
Not Vulnerable:

AVG Anti-Virus For Linux UPX File Parsing Denial of Service Vulnerability

AVG Anti-Virus for Linux is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, attackers may also be able to execute arbitrary code, but this has not been confirmed.

Versions prior to AVG Anti-Virus 7.5.51 are vulnerable.

AVG Anti-Virus For Linux UPX File Parsing Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AVG Anti-Virus For Linux UPX File Parsing Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AVG Anti-Virus For Linux UPX File Parsing Denial of Service Vulnerability

References:

• AVG Anti-Virus Homepage (AVG)
  
• iViZ Security Advisory 08-014 (iViZ Security Advisories )