JVN#8EDB8A96

Virus Security heap overflow vulnerability

Overview

SourceNext Virus Security has a problem in the email processing. It is affected by a heap overflow vulnerability when receiving specially crafted emails.

Products Affected

• 2.0.0.9 (K7SpmSrc.exe) and earlier
• (Virus Security version 7.7.1120 and earlier)

Description

Impact

A remote attacker may cause a denial of service and execute arbitrary code with the Local System privilege.

Solution

Vendor Status

References

1. LAC SNS Advisory No.81
   SourceNext Virus Security 2005 Heap Overflow

JPCERT/CC Addendum

Credit

Yuu Arai of LAC Co., Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the vendors under Information Security Early Warning Partnership.

Other Information

Update History