Description
Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted (1) ACE or (2) LZH file, resulting from an "integer cast around."
References
- 37982 vdb-entry
- 25003 vdb-entry
- 37983 vdb-entry
- norman-ace-bo(35561) vdb-entry
- ADV-2007-2619 vdb-entry
- 20070723 n.runs-SA-2007.020 - Norman Antivirus ACE parsing Arbitrary Code Execution Advisory mailing-list
- http://www.nruns.com/security_advisory_norman_antivirus_lzh_buffer_overflow.php
- norman-lzh-bo(35559) vdb-entry
- 26178 third-party-advisory
- http://www.nruns.com/security_advisory_Norman_all_ace_buffer_overflow.php
- 25015 vdb-entry
- 1018438 vdb-entry
- 20070723 n.runs-SA-2007.021 - Norman Antivirus LZH parsing Arbitrary Code Execution Advisory mailing-list
- 2912 third-party-advisory