JVN#1F649902

McAfee VirusScan Engine buffer overflow vulnerability

Overview

McAfee VirusScan Engine contains a buffer overflow vulnerability.

Products Affected

• Scan Engine v.4320 (any McAfee Antivirus products using the 4320 engine with DAT version less than 4436)

Description

Impact

A buffer overflow may occur when scanning a malformed LHA file.

Solution

Vendor Status

References

1. ISS X-Force Advisories: McAfee AntiVirus Library Stack Overflow
   By crafting an LHA file, an attacker is able to trigger a stack overflow
2. Internet Security Systems
   http://www.isskk.co.jp/support/techinfo/general/mcafee_190.html
3. US-CERT Vulnerability Note VU#361180
   McAfee Scan Engine vulnerable to buffer overflow in LHA decoder

JPCERT/CC Addendum

Credit

Other Information

Update History