Antivirus Mail Scanners DoS

[Zhen-Xjell]

Most Antivirus applications uncompress archives before scanning them for viruses. A specially constructed compressed file containing only NULL values (or any other repeating one character value) will be a size of only a few bytes when compressed, but when uncompressed it will be a few megabytes of "information". This could cause a denial of service attack against the Antivirus scanning engine, by exhausting all available memory or disk space.

http://www.securiteam.com/securitynews/5PP0P1P6AM.html

[Checkout]

Now that's a nasty, twisted development...

[javacool]

Now that's a nasty, twisted development...

And you have to wonder: where's all the quality-assurance testing on THAT one?