list@rem0te.com
04/10/05, 00:55
Date
October 3, 2005
Vulnerability
The Kaspersky Antivirus Library provides file format support for virus an=
alysis. During analysis of cab files Kaspersky is vulnerable to a heap ov=
erflow allowing attackers complete control of the system(s) being protect=
ed. This vulnerability can be exploited remotely without user interaction=
in default configurations through common protocols such as SMTP, SMB, HT=
TP, and FTP.
Impact
Successful exploitation of Kaspersky protected systems allows attackers u=
nauthorized control of data and related privileges. It also provides leve=
rage for further network compromise. Kaspersky Antivirus Library implemen=
tations are likely vulnerable in their default configuration.
Affected Products
Due to the library=E2=80=99s OS independent design and core functionality=
: it is likely this vulnerability affects a substantial portion of Kasper=
sky=E2=80=99s gateway, server, and client antivirus enabled product lines=
on most platforms.
http://www.kaspersky.com/products
Note: Kaspersky=E2=80=99s antivirus OEM product line is a program where v=
endors may license the vulnerable library. The following link is a list c=
ontaining some of the Kaspersky partners with products also likely affect=
ed by this vulnerability. Refer to your vendor for specifics.
http://www.kaspersky.com/oemsuccess
Credit
This vulnerability was discovered and researched by Alex Wheeler.
Contact
security@rem0te.com
Advisory Details
http://www.rem0te.com/public/images/kaspersky.pdf
October 3, 2005
Vulnerability
The Kaspersky Antivirus Library provides file format support for virus an=
alysis. During analysis of cab files Kaspersky is vulnerable to a heap ov=
erflow allowing attackers complete control of the system(s) being protect=
ed. This vulnerability can be exploited remotely without user interaction=
in default configurations through common protocols such as SMTP, SMB, HT=
TP, and FTP.
Impact
Successful exploitation of Kaspersky protected systems allows attackers u=
nauthorized control of data and related privileges. It also provides leve=
rage for further network compromise. Kaspersky Antivirus Library implemen=
tations are likely vulnerable in their default configuration.
Affected Products
Due to the library=E2=80=99s OS independent design and core functionality=
: it is likely this vulnerability affects a substantial portion of Kasper=
sky=E2=80=99s gateway, server, and client antivirus enabled product lines=
on most platforms.
http://www.kaspersky.com/products
Note: Kaspersky=E2=80=99s antivirus OEM product line is a program where v=
endors may license the vulnerable library. The following link is a list c=
ontaining some of the Kaspersky partners with products also likely affect=
ed by this vulnerability. Refer to your vendor for specifics.
http://www.kaspersky.com/oemsuccess
Credit
This vulnerability was discovered and researched by Alex Wheeler.
Contact
security@rem0te.com
Advisory Details
http://www.rem0te.com/public/images/kaspersky.pdf