Description
Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers that contain incorrect values in the length field.
References
- 15971 vdb-entry
- 276 third-party-advisory
- ADV-2005-3003 vdb-entry
- http://www.rem0te.com/public/images/symc2.pdf
- 1015384 vdb-entry
- 20051220 Symantec Antivirus Library Remote Heap Overflows mailing-list
- VU#305272 third-party-advisory
- 18131 third-party-advisory