Re: Norton Antivirus 2002 fails to scan files with special character(s) properly.

["Marco Marabelli" <mm () smrt it>]

----- Original Message ----- 
From: "Bipin Gautam." <door_hunt3r () blackcodemail com>
To: <bugtraq () securityfocus com>
Sent: Friday, March 05, 2004 7:35 PM
Subject: Norton Antivirus 2002 fails to scan files with special character(s)
properly.


> Subject: Norton Antivirus 2002  fails to scan files with special
character(s) properly.
> Published: Friday, 05 March, 2004
> Discovered By: Bipin Gautam ( hUNT3R )
> Product Version: Norton Antivirus 2002 [ ver: 8.00.58 ] (~Only tested
On...~)
> Risk Impact: Low-Medium
>
> *   *   *
> Details:
>
> During a 'manual scan' of a folder, if Norton Antivirus (NAV) encounters a
file /folder name with 'some'  ASCII characters ( 1-31) NAV can't further
proceed the manual scan and its front-end 'NAVW32.exe' crashes! This Bug has
no impact in the NAV Auto-Protect Engine.
> Exploit: http://www.geocities.com/visitbipin/test_nav.zip
> Create a folder (say: '!' ) and put some sub-folders and files in it. The
file/sub-folder name must contain  ASCII character(s)  ( 1-31) . Have a
manual scan of the folder named '!' NAV can't  proceed the scan and crashes!
<snip>

No troubleshooting found in NAV-2003-Pro ed. on win2000pro. ascii dir
created and scanned.
NAVW32.exe seems to work fine.
Regards,
Marco Marabelli