This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Community Information

CA Vet Antivirus Library Remote Heap Overflow

1 min read

This thread's last reply is from May 24, 2005, 5:27 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

'KotaGuy Admin/Teacher Emeritus
May 23, 2005, 5:25 PM UTC
"Computer Associates Vet library provides antivirus scan engine capabilities. Vet scan engines allow products to analyze various streams for malware. Vet is vulnerable to an integer wrap during the analysis of an OLE stream. The integer wrap causes an arbitrary heap overflow with no character restrictions allowing remote attackers control of the system(s) Vet is protecting."

Security Focus BUGTRAQ.
'KotaGuy Admin/Teacher Emeritus
May 23, 2005, 5:25 PM UTC
Bump
'KotaGuy Admin/Teacher Emeritus
May 24, 2005, 2:13 PM UTC
"Alex Wheeler has reported a vulnerability in various Computer
Associates products, which can be exploited by malicious people to
compromise a vulnerable system."

Secunia Advisory here.
'KotaGuy Admin/Teacher Emeritus
May 24, 2005, 5:27 PM UTC
" A high-risk security flaw in several of Computer Associates International's antivirus products could put users at risk of cyberattack, the software vendor warned on Monday."

Full story here.