Description
The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service (engine crash) via a crafted UPX compressed file, which triggers a divide-by-zero error.
References
- avg-upx-dos(44057) vdb-entry
- ADV-2008-2225 vdb-entry
- 1020570 vdb-entry
- 20080729 n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote) mailing-list
- http://www.grisoft.com/ww.94247
- http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt
- 31290 third-party-advisory
- 30417 vdb-entry