Multiple vulnerabilities have been identified in Norman Virus Control, which could be exploited by remote attackers or malware to bypass security checks, cause a denial of service, or take complete control of an affected system.
The first issue is caused by buffer overflow errors when processing malformed ACE files, which could be exploited by attackers to execute arbitrary commands by tricking a vulnerable application into scanning a malicious file .
The second vulnerability is caused by buffer overflow errors when processing malformed LZH files, which could be exploited by attackers to execute arbitrary commands by tricking a vulnerable application into scanning a malicious file.
The third issue is caused by an error within the DOC OLE2 file parsing code, which could be exploited to bypass malware detection via a specially crafted file.
The fourth vulnerability is caused by a divide-by-zero error within the DOC OLE2 file parsing code, which could be exploited to crash an affected application or exhaust all available memory resources, creating a denial of service condition.
