CVE-2005-4786 Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as used in HAURI anti-virus products including (1) ViRobot Expert 4.0, (2) ViRobot Advanced Server, and (3) HAURI LiveCa...
MediumCVSS 4.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as used in HAURI anti-virus products including (1) ViRobot Expert 4.0, (2) ViRobot Advanced Server, and (3) HAURI LiveCall, allows user-assisted attackers to execute arbitrary code via an ALZ archive containing a file with a long filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hauri livecall | All versions | No fix listed |
| hauri virobot | = advanced_server | No fix listed |
| hauri virobot | = expert_4.0 | No fix listed |
| hauri virobot | = linux_server_2.0 | No fix listed |
| hauri vrazmain.dll | = 5.8.22.137 | No fix listed |
References
- 20061006 Secunia Research: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow mailing-list patch
- 16852 patch third-party-advisory vendor-advisory
- secunia.com patch
- 1015018 patch vdb-entry
- 1015019 patch vdb-entry
- 19878 patch vdb-entry
- 15045 patch vdb-entry
- ADV-2005-1978 vdb-entry
- hauri-alz-filename-bo(22535) vdb-entry