Posted by Virus Bulletin on Nov 15, 2006
Reports of buffer overflows and other problems.
A series of vulnerabilities have been discovered and patched in Grisoft's AVG Antivirus. Several issues with archive handling could be exploited to cause buffer overflows, while some other problems with file handling, including DOC and EXE files, could be used to create a denial of service.
AVG, the popular free edition of which is subject to the problems as well as other versions, has been updated with patches for the vulnerabilities. Secunia has rated the problems 'highly critical'; its alert is here, while a brief announcement of the update from Grisoft is here.
Secunia is also carrying an alert, marked 'moderately critical', on a nebulous issue with FRISK's F-PROT, which apparently could also be exploited to cause a buffer overflow leading to denial of service or remote system access. No further details on the problem or any necessary patches are as yet available, but users are advised to keep an eye out for updates. The alert is here.
Posted on 15 November 2006 by Virus Bulletin
