Description
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
References
- VU#107822 third-party-advisory
- 20050208 Symantec AntiVirus Library Heap Overflow third-party-advisory
- 1013133 vdb-entry
- upx-engine-gain-control(18869) vdb-entry
- http://www.symantec.com/avcenter/security/Content/2005.02.08.html