[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-292269-105":59,"doc-detail-292269-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","mcafee-security-bulletin-march-17-2005","McAfee Security Bulletin - March 17, 2005","","McAfee announces that customers running VirusScan Engine version 4320 are susceptible to buffer overflow issues when scanning LHa files. The bulletin explains two related vulnerabilities (CAN-2005-0643 and CAN-2005-0644) and identifies affected products using the 4320 engine with insufficient DAT versions. It states that no known public exploit code exists as of publication. Recommended actions include updating DAT files and upgrading to Scan Engine 4400, plus guidance on verifying Engine and DAT versions in enterprise environments.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/mcafee-security-bulletin-march-17-2005/292269/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/mcafee-security-bulletin-march-17-2005/292269.png","ImageObject",300,407,{"name":92,"@type":93},"Elsa","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-07","2026-09-17",true,{"@type":102,"interactionType":103,"userInteractionCount":39},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Who is susceptible according to the bulletin?","Question",{"text":112,"@type":113},"Customers operating on the previous McAfee VirusScan Engine version 4320 are susceptible when scanning LHa files. If the environment already runs Scan Engine 4400 or a DAT version of 4436 (or higher), no action is required.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What vulnerabilities are summarized in this bulletin?",{"text":117,"@type":113},"The bulletin summarizes CAN-2005-0643 (engine buffer overflow when scanning LHa files) and CAN-2005-0644 (engine buffer overflow when scanning malformed LHa files). Both issues involve susceptibility in engine version 4320 and are addressed by configuration changes delivered via later DAT files.",{"name":119,"@type":110,"acceptedAnswer":120},"What updates does McAfee recommend?",{"text":121,"@type":113},"McAfee recommends downloading and applying the latest DAT files and the latest Scan Engine (v.4400). It also urges customers to verify deployment of DAT 4436 (or higher) and/or the 4400 Scan Engine, with no action required if those versions are already in place.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},292269,1790006440,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":39,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":81,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":143,"read_time":39},137455077381,"https://ap-avatar.wpscdn.com/davatar_994ba38a5ba835b3df7d355c54d3ed8d","Security Bulletin  \nMarch 17, 2005  \nMcAfee Security Bulletin  \nOverview  \nMcAfee is announcing to its’customers who are operating on a previous version of the McAfee VirusScan Engine (version 4320) are susceptible to a buffer overrun when scanning LHa files.  \n• No action is required if your environment is currently running the 4400 Scan Engine (issued November 2004) or the Virus Definition (DAT) version is 4436 (issued March 1, 2005) or higher  \nMcAfee strongly encourages all McAfee customers to read the following bulletin and, if necessary, implement the recommendations listed below as soon as possible.  \nThe automatic downloading and installation of updates and upgrades as a default setting in VirusScan assures the delivery of the latest product version to our customers. We urge all customers to verify that they have installed and deployed the 4436 DAT [or higher] and/or the 4400 Scan Engine. If running an  \nearlier . DAT and the previous version of the McAfee VirusScan engine (4320), McAfee recommends that an update is performed. As of the writing of this security bulletin, there are no known public cases of exploit code that exist.  \nSummary of Vulnerabilities  \nCAN-2005-0643-McAfee Engine Buffer Overflow when scanning LHa files  \nA vulnerability announcement in May 2004 prompted McAfee to inspect our technology to determine the susceptibility to the potential exploit. This inspection determined that the 4320 version of the McAfee Scan Engine was susceptible to a buffer overflow when scanning LHa files. An alteration to the configuration of the Scan Engine issued with the 4357 DAT file (issued May 2004) was made to eliminate the vulnerability within the 4320 Scan Engine.  \nProducts affected: Scan Engine 4320 – any McAfee point products still using the 4320 engine and DAT version less than 4357.  \nCAN-2005-0644-Engine Buffer Overflow when scanning malformed LHa files  \nIn February 2005, a variation of this vulnerability was reported to McAfee by ISS X-Force. It was found that the 4320 version of the McAfee Scan Engine was susceptible to a buffer overflow when scanning malformed LHa files. An alteration to the configuration of the Scan Engine issued (March 1, 2005) with the 4436 DAT file was made to eliminate the vulnerability within the 4320 Scan Engine. The McAfee 4400 engine (issued November 2004) does not have this vulnerability.  \nProducts affected: Scan Engine v.4320 – any McAfee point products still using the 4320 engine and DAT version less than 4436.  \nThe following McAfee products and suites may include the vulnerable engine (4320) .  \nMcAfee Consumer Products:  \n− McAfee InternetSecurity Suite  \n− VirusScan (all versions)  \n− VirusScan Professional  \nMcAfee SMB and Enterprise Products:  \n− Active Mail Protection  \n− Active Threat Protection  \n− Active Virus Defense SMB Edition  \n− Active VirusScan SMB Edition  \n− GroupShield for Exchange  \n− GroupShield for Exchange 5.5  \n− GroupShield for Lotus Domino  \n− GroupShield for Mail Servers with ePO  \n− LinuxShield  \n− Managed VirusScan  \n− NetShield for Netware  \n− PortalShield for Microsoft SharePoint  \n− SecurityShield for Microsoft ISA Server  \n− Virex  \n− VirusScan ASaP  \n− VirusScan Command Line  \n− VirusScan® Enterprise 8.0i  \n− VirusScan for NetApp  \n− WebShield Appliances  \n− WebShield SMTP  \nRecommendations  \nFor McAfee Consumer Customers:  \nMcAfee strongly recommends customers to download and apply the latest . DAT files and the latest Scan Engine (v.4400) . No action is required if the Scan Engine version is 4400 or the DAT version is 4436 (issued March 1 2005) or higher. Consumers can update their software by right-clicking on their system tray icon (white M on Red background) and selecting “Updates”. More information is available at: [http://ts.mcafeehelp.com/faq3.asp?docid=378097](http://ts.mcafeehelp.com/faq3.asp?docid=378097) .  \nFor McAfee SMB and Enterprise Customers:  \nTo address the above vulnerabilities, McAfee strongly recommends customers to do","cbCaivtYiDYYHq1h","https://ap.wps.com/l/cbCaivtYiDYYHq1h","pdf",65340,"English","# Overview\n# Summary of Vulnerabilities\n## CAN-2005-0643-McAfee Engine Buffer Overflow when scanning LHa files\n## CAN-2005-0644-Engine Buffer Overflow when scanning malformed LHa files\n# Products Affected\n# Recommendations\n## For McAfee Consumer Customers\n## For McAfee SMB and Enterprise Customers\n# How do I check Engine & DAT Versions within Enterprise Products?","[{\"question\":\"Who is susceptible according to the bulletin?\",\"answer\":\"Customers operating on the previous McAfee VirusScan Engine version 4320 are susceptible when scanning LHa files. If the environment already runs Scan Engine 4400 or a DAT version of 4436 (or higher), no action is required.\"},{\"question\":\"What vulnerabilities are summarized in this bulletin?\",\"answer\":\"The bulletin summarizes CAN-2005-0643 (engine buffer overflow when scanning LHa files) and CAN-2005-0644 (engine buffer overflow when scanning malformed LHa files). Both issues involve susceptibility in engine version 4320 and are addressed by configuration changes delivered via later DAT files.\"},{\"question\":\"What updates does McAfee recommend?\",\"answer\":\"McAfee recommends downloading and applying the latest DAT files and the latest Scan Engine (v.4400). It also urges customers to verify deployment of DAT 4436 (or higher) and/or the 4400 Scan Engine, with no action required if those versions are already in place.\"}]","McAfee Security Bulletin - March 17, 2005 | PDF",1789649667]