F-PROT Antivirus: Multiple Denial of Service vulnerabilities
Gentoo Linux Security Advisory
||GLSA 200904-14 / f-prot
||April 14, 2009
||April 17, 2009: 04
All supported architectures
Multiple errors in F-PROT Antivirus may lead to a Denial of Service.
F-PROT Antivirus is a multi-platform virus scanner for workstations and
The following vulnerabilities were found:
- Multiple errors when processing UPX, ASPack or Microsoft Office
- Infinite Sergio Alvarez of n.runs AG reported an invalid memory
access when processing a CHM file with a large nb_dir value
- Jonathan Brossard from iViZ Techno Solutions reported that F-PROT
Antivirus does not correctly process ELF binaries with corrupted
A remote attacker could entice a user or automated system to scan a
specially crafted file, leading to a crash or infinite loop.
There is no known workaround at this time.
All F-PROT Antivirus users should upgrade to the latest version:
Code Listing 3.1: Resolution
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-antivirus/f-prot-6.0.2"