Description
The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a crafted DOC file, resulting from an "integer cast around".
References
- ADV-2007-2619 vdb-entry
- 20070723 n.runs-SA-2007.022 - Norman Antivirus DOC parsing Detection Bypass Advisory mailing-list
- 2913 third-party-advisory
- norman-doc-security-bypass(35558) vdb-entry
- 37981 vdb-entry
- 25020 vdb-entry
- 26178 third-party-advisory
- 1018438 vdb-entry
- http://www.nruns.com/security_advisory_norman_antivirus_doc_depection_bypass.php