Description
Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ archives.
References
- http://www.zerodayinitiative.com/advisories/ZDI-07-013.html
- 24778 third-party-advisory
- 1017882 vdb-entry
- http://www.kaspersky.com/technews?id=203038694
- ADV-2007-1268 vdb-entry
- 20070405 ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability mailing-list
- kaspersky-arj-bo(33489) vdb-entry
- 23346 vdb-entry
- http://www.kaspersky.com/technews?id=203038693
- 1017883 vdb-entry