Description
The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service EDB-6174 · dos · Jul 31, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20080731 F-PROT antivirus 6.2.1.4252 infinite loop denial of service via malformed archive mailing-list
- 1020612 vdb-entry
- 6174 exploit
- ADV-2008-2283 vdb-entry
- 31313 third-party-advisory
- fprotantivirus-infiniteloop-dos(44134) vdb-entry
- 30461 vdb-entry