[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory

To: 3APA3A <3APA3A@xxxxxxxxxxxxxxxx>
Subject: Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory
From: Sergio Alvarez <sergio.alvarez@xxxxxxxxx>
Date: Mon, 27 Aug 2007 22:41:50 +0200

Hi 3APA3A,

It was a mistake in the advisory,
It should say:

"Integer cast around in UPX packed files parsing"

I ask for apologies for the mistake.
Unfortunately we can't give more details about the vulnerability because
the German Law (§202)

Cheers,
  Sergio


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory
  - From: Kevin Finisterre (lists)
- Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory
  - From: Lisa Thalheim

References:
- [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory
  - From: security
- Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory
  - From: 3APA3A

Prev by Date: Re: [Full-disclosure] UTF reverse-writing WYSINWG "feature"
Next by Date: Re: [Full-disclosure] UTF reverse-writing WYSINWG "feature"
Previous by thread: Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory
Next by thread: Re: [Full-disclosure] n.runs-SA-2007.027 - Sophos Antivirus UPX parsing Arbitrary CodeExecution Advisory
Index(es):
- Date
- Thread