Secunia Research has discovered a vulnerability in various HAURI anti-virus products, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the ACE archive decompression library (vrAZace.dll) when extracting an archive. This can be exploited to cause a stack-based buffer overflow when scanning a malicious ACE archive containing a compressed file with a filename longer than 272 characters.

Successful exploitation allows execution of arbitrary code, but requires that compressed file scanning is enabled.

The vulnerability is related to:
SA14359

The vulnerability has been confirmed in the following products:
* ViRobot Expert 4.0
* ViRobot Advanced Server
* ViRobot Linux Server 2.0
* HAURI LiveCall

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Tan Chew Keong, Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2005-33/advisory/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers