Computer Associates Anti-Virus Engine Malformed CAB Filename Buffer Overflow Vulnerability

Computer Associates Anti-Virus Engine Malformed CAB Filename Buffer Overflow Vulnerability

References:

Computer Associates Homepage (Computer Associates)
Security Notice for CA products implementing the Anti-Virus engine (Computer Associates)
ZDI-07-034 CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vul (Zero Day Initiative)
[CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabiliti (Computer Associates)
ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vu (zdi-disclosures@3com.com)
Vulnerability Note VU#739409 Computer Associates Anti-Virus engine fails to prop (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus