[security-alerts] FW: [SA26171] Panda Antivirus EXE File Parsing Buffer Overflow Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
>
> TITLE:
> Panda Antivirus EXE File Parsing Buffer Overflow Vulnerability
>
> SECUNIA ADVISORY ID:
> SA26171
>
> VERIFY ADVISORY:
> http://secunia.com/advisories/26171/
>
> CRITICAL:
> Highly critical
>
> IMPACT:
> System access
>
> WHERE:
> From remote
>
> SOFTWARE:
> Panda AntiVirus Enterprise Suite
> http://secunia.com/product/781/
> Panda AntiVirus Platinum 6.x
> http://secunia.com/product/7297/
> Panda AntiVirus Platinum 7.x
> http://secunia.com/product/779/
> Panda AntiVirus Small Business Edition
> http://secunia.com/product/780/
> Panda AntiVirus Titanium
> http://secunia.com/product/778/
>
> DESCRIPTION:
> Sergio Alvarez has reported a vulnerability in Panda Antivirus, which
> can be exploited by malicious people to compromise a vulnerable
> system.
>
> The vulnerability is caused due to a boundary error when parsing .EXE
> files and can be exploited to cause a buffer overflow when e.g.
> scanning a specially crafted .EXE file.
>
> Successful exploitation allows execution of arbitrary code.
>
> SOLUTION:
> An update has reportedly been issued on 2007-07-20 through the
> regular update mechanism.
>
> PROVIDED AND/OR DISCOVERED BY:
> Sergio Alvarez, n.runs AG
>
> ORIGINAL ADVISORY:
> http://www.nruns.com/%5Bn.runs-SA-2007.019%5D%20-%20Panda%20An
> tivirus%20EXE%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
>