----- Original Message ----- From: "Bipin Gautam." <door_hunt3r@blackcodemail.com> To: <bugtraq@securityfocus.com> Sent: Friday, March 05, 2004 7:35 PM Subject: Norton Antivirus 2002 fails to scan files with special character(s) properly. > > > Subject: Norton Antivirus 2002 fails to scan files with special character(s) properly. > Published: Friday, 05 March, 2004 > Discovered By: Bipin Gautam ( hUNT3R ) > Product Version: Norton Antivirus 2002 [ ver: 8.00.58 ] (~Only tested On...~) > Risk Impact: Low-Medium > > * * * > Details: > > During a 'manual scan' of a folder, if Norton Antivirus (NAV) encounters a file /folder name with 'some' ASCII characters ( 1-31) NAV can't further proceed the manual scan and its front-end 'NAVW32.exe' crashes! This Bug has no impact in the NAV Auto-Protect Engine. > > Exploit: http://www.geocities.com/visitbipin/test_nav.zip > Create a folder (say: '!' ) and put some sub-folders and files in it. The file/sub-folder name must contain ASCII character(s) ( 1-31) . Have a manual scan of the folder named '!' NAV can't proceed the scan and crashes! <snip> No troubleshooting found in NAV-2003-Pro ed. on win2000pro. ascii dir created and scanned. NAVW32.exe seems to work fine. Regards, Marco Marabelli