F-PROT Antivirus Engine < 4.4.4 Multiple File Handling DoS Vulnerabilities

NASLDB: F-PROT Antivirus Engine < 4.4.4 Multiple File Handling DoS Vulnerabilities

General

ID: 33549
Name: F-PROT Antivirus Engine < 4.4.4 Multiple File Handling DoS Vulnerabilities

Summary: Checks if vulnerable version of F-PROT Anti-Virus engine is installed

Credits: –

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Port: 139
Family: Windows
Type: Local

Description

The version of F-PROT Anti-Virus installed on the remote Windows
host contains flaws in the way it handles CHM, UPX-compressed,
ASPack-compressed and certain Microsoft office files.

– A malformed CHM file containing ‘0xffffffff’ in the ‘nb_dir’
field could crash the application.

– A malformed UPX-compressed or ASPack-compressed file could
crash the application.

– A specially crafted Microsoft office document could trigger
a infinite loop, causing a denial of service condition.