DoS vulnerability in F-PROT

Manipulated ZIP archives cause F-PROT's virus scanner to misbehave. An error in the engine is reported to overload the CPU when certain archives are scanned, causing the system to become sluggish or even cease to respond. The error is said to occur in the Linux version 6.2.1.4252 with engine version 4.4.4.56, and in the Windows version 6.0.9.1 with engine version 4.4.4. There is no update yet.

See also:

• F-PROT antivirus 6.2.1.4252 infinite loop denial of service via malformed archive, report by Knud Erik Højgaard

(trk)