Fedora Update for clamav FEDORA-2008-3420

Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2008-3420 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Core 9 FEDORA-2009-1189 (gedit)

The remote host is missing an update to gedit announced via advisory FEDORA-2009-1189. OpenVAS Vulnerability Test $Id: fcore20091189.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1189 gedit Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CVE-2009-0314

Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

CVE-2009-0314

CVE-2009-0314 affects the gedit Python module, where an untrusted search path in PySys_SetArgv allows local users to run arbitrary code via a Trojan horse Python file in the current working directory. The vulnerability is tied to CVE-2008-5983 and is discussed across multiple advisories and Nessu...

Gentoo Security Advisory GLSA 200805-19 (clamav)

The remote host is missing updates announced in advisory GLSA 200805-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-19 (clamav)

The remote host is missing updates announced in advisory GLSA 200805-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 9 : clamav-0.93-1.fc9 (2008-3900)

Security update - upgrade to upstream version 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1836 442744: DoS via not null terminated string in...

Fedora 8 : clamav-0.92.1-2.fc8 (2008-3420)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...

Fedora 7 : clamav-0.92.1-2.fc7 (2008-3358)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...

openSUSE 10 Security Update : clamav (clamav-5199)

This version upgrade of ClamAV to 0.93 fixes a long list of vulnerabilities. These vulnerabilities can lead to remote code execution, bypassing the scanning engine, remote denial-of-service, local file overwrite. CVE-2008-1837, CVE-2008-1836, CVE-2008-1835, CVE-2008-1833, CVE-2008-1387,...

Debian DSA-1549-1 : clamav - buffer overflows

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0314 Damian Put discovered that a buffer overflow in the handler for PeSpin binaries may lead to the execution of...

[SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1549-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 17, 2008 http://www.debian.org/security/faq -...

ClamAV libclamav库PeSpin堆溢出漏洞

BUGTRAQ ID: 28784 CVECAN ID: CVE-2008-0314 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV中负责解压用PeSpin加密所包装的PE库的代码存在堆溢出漏洞，攻击者可能通过诱使用户处理畸形文件控制用户系统。 以下为libclamav/spin.c中的有漏洞代码段： 417 key32 = clireadint32ep+0x2fee; ... 427 clidbgmsg"spin: Resources sect%d appear to be compressed\n\tuncompressed...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-0314

CVE-2008-0314 is discussed in the Mandriva advisory MDVSA-2008:088 as a heap-based buffer overflow in ClamAV 0.92.1’s libclamav (spin.c) that allows remote execution via a crafted PeSpin packed PE binary. The issue is mitigated by upgrading to the newer ClamAV release (0.93+), which addresses thi...

[Full-disclosure] iDefense Security Advisory 04.14.08: ClamAV libclamav PeSpin Heap Overflow Vulnerability

iDefense Security Advisory 04.14.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 14, 2008 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. ClamAV is often integrated into e-mail gateways and used to scan e-mail traffic for viruses. It supports virus scanning...

CVE-2007-0314

CVE-2007-0314 affects Article System 1.0 with multiple PHP remote file inclusion vulnerabilities. The issue is triggered by passing a URL through the INCLUDE_DIR parameter to (1) forms.php, (2) issue_edit.php, (3) client.php, and (4) classes.php), allowing an attacker to cause arbitrary PHP code ...

CVE-2006-0314

CVE-2006-0314 concerns PDFdirectory before 1.0, where sensitive data is stored in plaintext. The underlying issue is an SQL injection vulnerability that could allow remote attackers to query the database and obtain arbitrary users’ passwords. The documents do not specify exact affected versions b...

CVE-2005-0314

Cross-site scripting XSS vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields...

CVE-2005-0314

The CVE-2005-0314 entry describes a Cross-site Scripting (XSS) vulnerability in the Magic Winmail Server 4.0 Build 1112, specifically in user.php, where remote attackers can inject arbitrary web script or HTML through personal information fields. The connected records corroborate the same vulnera...