clamav -- CHM unpacker and PE rebuilding vulnerabilities

2006-10-15T00:00:00
ID 8012A79D-5D21-11DB-BB8D-00123FFE8333
Type freebsd
Reporter FreeBSD
Modified 2006-10-15T00:00:00

Description

Secunia reports:

Two vulnerabilities have been reported in Clam AntiVirus, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system. 1) An unspecified error in the CHM unpacker in chmunpack.c can be exploited to cause a DoS. 2) An unspecified error in rebuildpe.c when rebuilding PE files after unpacking can be exploited to cause a heap-based buffer overflow.