avast! Home/Professional

[brainslicer]

avast! Home/Professional TAR File Processing Heap Corruption

- Highly critical - From remote

Issued 1 day ago. Updated 2 hours ago. A vulnerability has been reported in avast! Home/Professional, which can be exploited by malicious people to compromise a vulnerable system.

 

Description:

A vulnerability has been reported in avast! Home/Professional, which can be exploited by malicious people to compromise a vulnerable system.

 

The vulnerability is caused due to an error within the handling of specially crafted TAR files. This can be exploited to corrupt heap memory via certain unspecified TAR fields.

 

The vulnerability is reported in versions prior to 4.7.1098.

 

Solution:

Update to version 4.7.1098.

http://www.avast.com/eng/download.html