Description
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression.
References
- 24391 third-party-advisory
- kaspersky-upx-dos(32797) vdb-entry
- 1017718 vdb-entry
- 22795 vdb-entry
- 20070302 Kaspersky AntiVirus UPX File Decompression DoS Vulnerability third-party-advisory
- ADV-2007-0810 vdb-entry