Buffer overflow in the file parsing engine in Avira Antivir...

Vulnerability Description

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."

References

• http://www.nruns.com/advisories/%5Bn.runs-SA-2007.010%5D%20-%20Avira%20Antivir%20Antivirus%20LZH%20parsing%20Arbitrary%20Code%20Execution%20Advisory.txt
• http://www.securityfocus.com/bid/24187
• http://forum.antivir-pe.de/thread.php?threadid=22528
• http://www.vupen.com/english/advisories/2007/1971
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063624.html
• http://osvdb.org/36712
• http://securityreason.com/securityalert/2764
• http://secunia.com/advisories/25417
• http://www.securityfocus.com/archive/1/469805/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34551
• http://securitytracker.com/id?1018131