Description
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.
References
- http://www.hustlelabs.com/advisories/04072006_alwil.pdf
- 19903 vdb-entry
- ADV-2006-3515 vdb-entry
- 21794 third-party-advisory