Secunia

Ryan Smith has reported a vulnerability in avast!, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the anti-virus engine when processing LHA archives. This can be exploited to cause a heap-based buffer overflow via a specially crafted LHA archive with overly long filename and directory name extended-header fields.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in the anti-virus engine prior to versions 4.7.869 for desktops and 4.7.660 for servers.

Solution
Update to a fixed version.

Provided and/or discovered by
Ryan Smith

Original Advisory
http://www.hustlelabs.com/advisories/04072006_alwil.pdf

Deep Links
Links available in Customer Area