Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.900017
Category:Denial of Service
Title:AVG Anti-Virus UPX Processing DoS Vulnerability
Summary:AVG AntiVirus is prone to a denial of service (DoS); vulnerability.
Description:Summary:
AVG AntiVirus is prone to a denial of service (DoS)
vulnerability.

Vulnerability Insight:
The flaw is caused to a divide by zero error in file parsing
engine while handling UPX compressed executables.

Vulnerability Impact:
Remote attackers with successful exploitation could deny the
service by causing the scanning engine to crash.

Affected Software/OS:
AVG Anti-Virus prior to 8.0.156.

Solution:
Update to version 8.0.156 or later.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2008-3373
BugTraq ID: 30417
http://www.securityfocus.com/bid/30417
Bugtraq: 20080729 n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote) (Google Search)
http://www.securityfocus.com/archive/1/494867/100/0/threaded
http://www.nruns.com/advisories/%5Bn.runs-SA-2008%20004%5D%20-%20AVG%20Antivirus%20UPX%20parsing%20Divide%20by%20Zero%20Advisory.txt
http://www.securitytracker.com/id?1020570
http://secunia.com/advisories/31290
http://www.vupen.com/english/advisories/2008/2225/references
XForce ISS Database: avg-upx-dos(44057)
https://exchange.xforce.ibmcloud.com/vulnerabilities/44057
CopyrightCopyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.