CVE

Id
23802  
CVE No.
CVE-2007-0445  
Status
Candidate  
Description
Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ archives.  
Phase
Assigned (20070123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
231174 23802 CVE-2007-0445 BUGTRAQ:20070405 ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability  View
231175 23802 CVE-2007-0445 URL:http://www.securityfocus.com/archive/1/archive/1/464878/100/0/threaded  View
231176 23802 CVE-2007-0445 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-013.html  View
231177 23802 CVE-2007-0445 CONFIRM:http://www.kaspersky.com/technews?id=203038693  View
231178 23802 CVE-2007-0445 CONFIRM:http://www.kaspersky.com/technews?id=203038694  View
231179 23802 CVE-2007-0445 BID:23346  View
231180 23802 CVE-2007-0445 URL:http://www.securityfocus.com/bid/23346  View
231181 23802 CVE-2007-0445 VUPEN:ADV-2007-1268  View
231182 23802 CVE-2007-0445 URL:http://www.vupen.com/english/advisories/2007/1268  View
231183 23802 CVE-2007-0445 SECTRACK:1017882  View
231184 23802 CVE-2007-0445 URL:http://www.securitytracker.com/id?1017882  View
231185 23802 CVE-2007-0445 SECTRACK:1017883  View
231186 23802 CVE-2007-0445 URL:http://www.securitytracker.com/id?1017883  View
231187 23802 CVE-2007-0445 SECUNIA:24778  View
231188 23802 CVE-2007-0445 URL:http://secunia.com/advisories/24778  View
231189 23802 CVE-2007-0445 XF:kaspersky-arj-bo(33489)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56292 JVNDB-2007-004984 Symantec 製品の Decomposer コンポーネントにおけるヒープベースのバッファオーバーフローの脆弱性 Symantec 製品の Decomposer コンポーネントには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-0447 23802 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004984.html  View