what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

n.runs-SA-2007.015.txt

n.runs-SA-2007.015.txt
Posted Jun 7, 2007
Authored by Sergio Alvarez | Site nruns.com

Various F-Secure products are susceptible to a remotely exploitable vulnerability when parsing FSG packed files.

tags | advisory
SHA-256 | a10b67e91d8751747b85120f6a3ddf708396072425c7e53c310c721114b13b48

n.runs-SA-2007.015.txt

Change Mirror Download
n.runs AG             
http://www.nruns.com/ security(at)nruns.com
n.runs-SA-2007.015 04-Jun-2007
________________________________________________________________________

Vendor: F-Secure Corporation, http://www.f-secure.com
Affected Products:
F-Secure Anti-Virus for Workstations version 7.00 and earlier
F-Secure Anti-Virus for Windows Servers version 7.00 and earlier
F-Secure Anti-Virus for Citrix Servers version 5.52
F-Secure Anti-Virus for MIMEsweeper version 5.61 and earlier
F-Secure Anti-Virus Client Security version 7.00 and earlier
F-Secure Anti-Virus for MS Exchange version 7.00 and earlier
F-Secure Internet Gatekeeper version 6.60 and earlier
F-Secure Internet Security 2005, 2006 and 2007
F-Secure Anti-Virus 2005, 2006 and 2007
Solutions based on F-Secure Protection Service for Consumers version 7.00
and earlier
F-Secure Anti-Virus for Linux Servers version 4.65 and earlier
F-Secure Anti-Virus for Linux Gateways version 4.65 and earlier
F-Secure Anti-Virus Linux Client Security 5.52 and earlier
F-Secure Anti-Virus Linux Server Security 5.52 and earlier
F-Secure Internet Gatekeeper for Linux 2.16 and earlier
Vulnerability: Infinite Loop DoS (remote)
Risk: HIGH
________________________________________________________________________

Vendor communication:

2007/05/07 initial notification to F-Secure Corporation
2007/05/08 F-Secure Corporation Response
2007/05/08 PGP public keys exchange
2007/05/08 PoC files sent to F-Secure Corporation
2007/05/14 F-Secure Corporation acknowledged the PoC files
2007/05/18 F-Secure Corporation validate the Vulnerability
2007/05/18 F-Secure Corporation notify update release date
2007/05/30 F-Secure Corporation released Update with fixes
________________________________________________________________________

Overview:

F-Secure Corporation protects consumers and businesses against computer
viruses and other threats from the Internet and mobile networks.
F-Secure award-winning solutions are available for workstations, gateways,
servers and mobile phones. They include antivirus and desktop firewall with
intrusion prevention, antispam and antispyware solutions, as well as network
control solutions for Internet Service Providers.
F-Secure protection is also available as a service through major ISPs, such
as France Telecom, TeliaSonera, PCCW and Charter Communications. F-Secure is
the global market leader in mobile phone protection provided through mobile
operators, such as T-Mobile and Swisscom and mobile handset manufacturers
such as Nokia.

Description:

A remotely exploitable vulnerability has been found in the files parsing
engine.

In detail, the following flaw was determined:

- Infinite Loop in FSG packed files parsing


Impact:

This problem can lead to remote denial of service provoked by high CPU
consume and exhaustion of storage resource if an attacker carefully crafts a
file that exploits the aforementioned vulnerability. The vulnerability is
present in F-Secure Corporation software products above mentioned in all
platforms supported by the affected products.

Solution:
The vulnerability was reported on 07.May.2007 and an update has been issued
on 30.May.2007 to solve this vulnerability. For detailed information about
the fixes follow the link in References [1] section of this document.
________________________________________________________________________

Credit:
Bugs found by Sergio Alvarez of n.runs AG.
________________________________________________________________________

References:
http://www.f-secure.com/security/fsc-2007-3.shtml [1]

This Advisory and Upcoming Advisories:
http://www.nruns.com/parsing-engines-advisories.php
________________________________________________________________________

Unaltered electronic reproduction of this advisory is permitted. For all
other reproduction or publication, in printing or otherwise, contact
security@nruns.com for permission. Use of the advisory constitutes
acceptance for use in an "as is" condition. All warranties are excluded. In
no event shall n.runs be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages, even if n.runs has been advised of the possibility of such damages.


Copyright 2007 n.runs AG. All rights reserved. Terms of apply.

Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close