Secunia

A vulnerability has been reported in RAV Antivirus, which can be exploited by malware to bypass certain scanning functionality.

The vulnerability is caused due to an error when parsing .zip archive headers and can be exploited via a specially crafted .zip archive where the uncompressed size of the archived file has been modified within the local and global headers.

Successful exploitation causes malware in a specially crafted .zip archive to pass the scanning functionality undetected.

NOTE: This is not a critical issue on client systems, as the malware still is detected upon execution.

Solution
Filter all compressed file archives (.zip) at border gateways.

Provided and/or discovered by
Discovered by anonymous person and reported via iDEFENSE.

Original Advisory
http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities

Deep Links
Links available in Customer Area