Description
AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption.
References
- 20081210 [IVIZ-08-014] AVG antivirus for Linux vulnerability mailing-list
- ADV-2008-3461 vdb-entry
- avg-linux-upx-dos(47254) vdb-entry
- 32749 vdb-entry
- 51962 vdb-entry
- http://www.ivizsecurity.com/security-advisory-iviz-sr-08014.html