Symantec UPX Parsing Engine Heap Overflow

[Mobo]

Symantec resolved a potential remote access compromise vulnerability reported by ISS X-Force. The vulnerability was identified in an early version of a Symantec antivirus scanning module responsible for parsing UPX compressed files that is still in limited use in some Symantec security products.

The vulnerable component fails to do proper bounds checks when analyzing certain container files for virus content. An attacker sending a specifically crafted UPX file could potentially compromise the targeted system.

Please continue Here to get additional info and links to updates http://www.sarc.com/avcenter/security/Cont...2005.02.08.html