F-PROT Antivirus: Multiple Denial of Service vulnerabilities
1.
Gentoo Linux Security Advisory
Version Information
| Advisory Reference |
GLSA 200904-14 / f-prot |
| Release Date |
April 14, 2009 |
| Latest Revision |
April 17, 2009: 04 |
| Impact |
normal |
| Exploitable |
remote |
| Package |
Vulnerable versions |
Unaffected versions |
Architecture(s) |
| app-antivirus/f-prot |
<
6.0.2 |
>=
6.0.2 |
All supported architectures
|
Related bugreports:
#232665, #253497
Synopsis
Multiple errors in F-PROT Antivirus may lead to a Denial of Service.
2.
Impact Information
Background
F-PROT Antivirus is a multi-platform virus scanner for workstations and
mail servers.
Description
The following vulnerabilities were found:
- Multiple errors when processing UPX, ASPack or Microsoft Office
files (CVE-2008-3243).
- Infinite Sergio Alvarez of n.runs AG reported an invalid memory
access when processing a CHM file with a large nb_dir value
(CVE-2008-3244).
- Jonathan Brossard from iViZ Techno Solutions reported that F-PROT
Antivirus does not correctly process ELF binaries with corrupted
headers (CVE-2008-5747).
Impact
A remote attacker could entice a user or automated system to scan a
specially crafted file, leading to a crash or infinite loop.
3.
Resolution Information
Workaround
There is no known workaround at this time.
Resolution
All F-PROT Antivirus users should upgrade to the latest version:
Code Listing 3.1: Resolution |
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-antivirus/f-prot-6.0.2"
|
4.
References
|
