Lucene search

K
freebsdFreeBSD6A5174BD-C580-11DA-9110-00123FFE8333
HistoryApr 06, 2006 - 12:00 a.m.

clamav -- Multiple Vulnerabilities

2006-04-0600:00:00
vuxml.freebsd.org
12

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.228 Low

EPSS

Percentile

96.5%

Secunia reports:

Some vulnerabilities have been reported in ClamAV, which
potentially can be exploited by malicious people to cause a
DoS (Denial of Service) and compromise a vulnerable system.
An unspecified integer overflow error exists in the PE header
parser in “libclamav/pe.c”. Successful exploitation requires that
the ArchiveMaxFileSize option is disabled.
Some format string errors in the logging handling in
“shared/output.c” may be exploited to execute arbitrary code.
An out-of-bounds memory access error in the “cli_bitset_test()”
function in “ibclamav/others.c” may be exploited to cause a
crash.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchclamav< 0.88.1UNKNOWN
FreeBSDanynoarchclamav-devel<= 20051104_1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.228 Low

EPSS

Percentile

96.5%