Panda Antivirus Exe File Parsing Buffer Overflow Vulnerability

[TCH-Thomas]

From: Secunia http://secunia.com/advisories/26171/

Rating: Highly critical

 

Description:

Sergio Alvarez has reported a vulnerability in Panda Antivirus, which can be exploited by malicious people to compromise a vulnerable system.

 

The vulnerability is caused due to a boundary error when parsing .EXE files and can be exploited to cause a buffer overflow when e.g. scanning a specially crafted .EXE file.

 

Successful exploitation allows execution of arbitrary code.

 

Solution:

An update has reportedly been issued on 2007-07-20 through the regular update mechanism.

[TCH-Bruce]

Thanks Thomas

[TCH-Don]

Thanks Thomas