Description
Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (2) RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
References
- http://www.grisoft.com/doc/36365/lng/us/tpl/tpl01
- 20061113 AVG Anti-Virus - Arbitrary Code Execution (remote) mailing-list
- ADV-2006-4498 vdb-entry
- 22811 third-party-advisory