Multiple AVG Products RAR/ZIP Files Scan Evasion Vulnerability
BID:34895
Info
Multiple AVG Products RAR/ZIP Files Scan Evasion Vulnerability
| Bugtraq ID: | 34895 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-1784 |
| Remote: | Yes |
| Local: | No |
| Published: | May 09 2009 12:00AM |
| Updated: | Apr 13 2015 09:10PM |
| Credit: | Thierry Zoller |
| Vulnerable: |
AVG AVG Anti-Virus 8.0.156 AVG AVG Anti-Virus 8.0 AVG AVG Anti-Virus 7.5.476 AVG AVG Anti-Virus 7.5.448 AVG AVG Anti-Virus 7.1.407 AVG AVG Anti-Virus 7.1.308 AVG AVG Anti-Virus 7.0.323 AVG AVG Anti-Virus 7.0.251 AVG AVG Anti-Virus 7.0 AVG AVG Anti-Virus 6.0.710 |
| Not Vulnerable: |
AVG AVG Anti-Virus 8.5 323 |
Discussion
Multiple AVG Products RAR/ZIP Files Scan Evasion Vulnerability
Multiple AVG products are prone to a vulnerability that may allow certain compressed archives to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the antivirus application will fail to detect.
The following products are affected:
AVG Anti-Virus Network Edition (prior to engine build 8.5 323)
AVG Internet Security Netzwerk Edition (prior to engine build 8.5 323)
AVG Server Edition für Linux/FreeBSD (prior to engine build 8.5 323)
AVG eMail Server Edition (prior to engine build 8.5 323)
AVG File Server Edition (prior to engine build 8.5 323)
AVG Internet Security SBS Edition (prior to engine build 8.5 323)
AVG Anti-Virus SBS Edition (prior to engine build 8.5 323)
AVG Anti-Virus plus Firewall (prior to engine build 8.5 323)
AVG Anti-Virus (prior to engine build 8.5 323)
Multiple AVG products are prone to a vulnerability that may allow certain compressed archives to bypass the scan engine.
Successful exploits will allow attackers to distribute files containing malicious code that the antivirus application will fail to detect.
The following products are affected:
AVG Anti-Virus Network Edition (prior to engine build 8.5 323)
AVG Internet Security Netzwerk Edition (prior to engine build 8.5 323)
AVG Server Edition für Linux/FreeBSD (prior to engine build 8.5 323)
AVG eMail Server Edition (prior to engine build 8.5 323)
AVG File Server Edition (prior to engine build 8.5 323)
AVG Internet Security SBS Edition (prior to engine build 8.5 323)
AVG Anti-Virus SBS Edition (prior to engine build 8.5 323)
AVG Anti-Virus plus Firewall (prior to engine build 8.5 323)
AVG Anti-Virus (prior to engine build 8.5 323)
Exploit / POC
Multiple AVG Products RAR/ZIP Files Scan Evasion Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple AVG Products RAR/ZIP Files Scan Evasion Vulnerability
Solution:
Reports indicate that this issue has been fixed. Please see the references for more information.
Solution:
Reports indicate that this issue has been fixed. Please see the references for more information.
References
Multiple AVG Products RAR/ZIP Files Scan Evasion Vulnerability
References:
References:
- [TZO-20-2009] - AVG generic ZIP bypass / evasion (Thierry Zoller)
- AVG Anti-Virus Homepage (AVG)
- [TZO-20-2009] AVG ZIP evasion / bypass (Thierry Zoller