Description: A vulnerability has been discovered in McAfee VirusScan, which potentially can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to a boundary error in a 3rd-party compression library (DUNZIP32.dll) when processing virus definition files. This can be exploited to cause a buffer overflow via a specially crafted definition file.
Successful exploitation requires that the user is e.g. tricked into updating the virus definition file from a malicious site.
The vulnerability has been reported in McAfee VirusScan version 10.0.21 included with McAfee SecurityCenter Agent version 6.0.0.16. Prior versions may also be affected.
Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, scan using the Network Software Inspector.
Solution: Update to the fixed version of DUNZIP32.dll via online update.
Provided and/or discovered by: Originally discovered by eEye Digital Security and NGSSoftware in RealPlayer and RealOne.
Reported in McAfee VirusScan by:
Juha-Matti Laurio
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
