Description
Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as used in HAURI anti-virus products including (1) ViRobot Expert 4.0, (2) ViRobot Advanced Server, and (3) HAURI LiveCall, allows user-assisted attackers to execute arbitrary code via an ALZ archive containing a file with a long filename.
References
- 20061006 Secunia Research: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow mailing-list
- 19878 vdb-entry
- hauri-alz-filename-bo(22535) vdb-entry
- ADV-2005-1978 vdb-entry
- 1015019 vdb-entry
- 1015018 vdb-entry
- 16852 third-party-advisory
- 15045 vdb-entry
- http://secunia.com/secunia_research/2005-47/advisory/