Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Avast_antivirus | Alwil | 4.0.168 | 4.0.168 |
| Avast_antivirus | Alwil | 4.0.172 | 4.0.172 |
| Avast_antivirus | Alwil | 4.0.183 | 4.0.183 |
| Avast_antivirus | Alwil | 4.0.202 | 4.0.202 |
| Avast_antivirus | Alwil | 4.0.211 | 4.0.211 |
| Avast_antivirus | Alwil | 4.0.229 | 4.0.229 |
| Avast_antivirus | Alwil | 4.0.235 | 4.0.235 |
| Avast_antivirus | Alwil | 4.1.260 | 4.1.260 |
| Avast_antivirus | Alwil | 4.1.268 | 4.1.268 |
| Avast_antivirus | Alwil | 4.1.278 | 4.1.278 |
| Avast_antivirus | Alwil | 4.1.287 | 4.1.287 |
| Avast_antivirus | Alwil | 4.1.289 | 4.1.289 |
| Avast_antivirus | Alwil | 4.1.304 | 4.1.304 |
| Avast_antivirus | Alwil | 4.1.319 | 4.1.319 |
| Avast_antivirus | Alwil | 4.1.335 | 4.1.335 |
| Avast_antivirus | Alwil | 4.1.342 | 4.1.342 |
| Avast_antivirus | Alwil | 4.1.357 | 4.1.357 |
| Avast_antivirus | Alwil | 4.1.389 | 4.1.389 |
| Avast_antivirus | Alwil | 4.1.396 | 4.1.396 |
| Avast_antivirus | Alwil | 4.1.412 | 4.1.412 |
| Avast_antivirus | Alwil | 4.1.418 | 4.1.418 |
| Avast_antivirus | Alwil | 4.1.501 | 4.1.501 |
| Avast_antivirus | Alwil | 4.5.518 | 4.5.518 |
| Avast_antivirus | Alwil | 4.5.549 | 4.5.549 |
| Avast_antivirus | Alwil | 4.5.561 | 4.5.561 |
| Avast_antivirus | Alwil | * | 4.6.460 |
| Avast_antivirus | Alwil | 4.6.603 | 4.6.603 |
| Avast_antivirus | Alwil | 4.6.623 | 4.6.623 |
| Avast_antivirus | Alwil | * | 4.6.763 |