← Advisories

VBA32 Personal Antivirus 3.12.8.x (malformed archive) DoS Exploit

High
Advisory ID
ZSL-2008-4899
Release Date
03 October 2008
Vendor
VirusBlokAda Ltd - http://www.anti-virus.by
Affected Version
3.12.8.x
Tested On
Microsoft Windows XP Professional SP2 (English)
Summary

Antivirus program for personal computers running Windows which is a reliable and, it is crucial, quick tool to detect and neutralize computer viruses, mail worms, trojan programs and other malware (backdoors, adware, spyware, etc) in real time and by request.

Description

Vba32 Personal Antivirus is prone to a denial-of-service vulnerability caused by an unspecified memory-corruption error. Attackers can exploit this issue to cause the application to crash, denying service to legitimate users. This may aid attackers in launching further attacks while the security application is not running.

Proof of Concept
Disclosure Timeline
07.10.2008Vendor has knowledge about the issue.
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
03.10.2008Initial release
07.10.2008Added Vendor Status
27.09.2012Added reference [5], [6] and [7]