98 matches found
Debian DSA-1024-1 : clamav - several vulnerabilities
Several remote vulnerabilities have been discovered in the ClamAV anti-virus toolkit, which may lead to denial of service and potentially to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1614 Damian Put discovered ...
Mac OS X Multiple Vulnerabilities (Security Update 2006-003)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...
SUSE-SA:2006:020: clamav
The remote host is missing the patch for the advisory SUSE-SA:2006:020 clamav. Clamav was updated to version 0.88.1 to fix the following security problems: - An integer overflow in the PE header parser CVE-2006-1614. - Format string bugs in the logging code could potentially be exploited to execu...
Mandrake Linux Security Advisory : clamav (MDKSA-2006:067)
Damian Put discovered an integer overflow in the PE header parser in ClamAV that could be exploited if the ArchiveMaxFileSize option was disabled CVE-2006-1614. Format strings in the logging code could possibly lead to the execution of arbitrary code CVE-2006-1615. David Luyer found that ClamAV...
GLSA-200604-06 : ClamAV: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200604-06 ClamAV: Multiple vulnerabilities ClamAV contains format string vulnerabilities in the logging code CVE-2006-1615. Furthermore Damian Put discovered an integer overflow in ClamAV's PE header parser CVE-2006-1614 and David...
DEBIAN-CVE-2006-1630
The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...
CVE-2006-1630
The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...
CVE-2006-1630
The CVE-2006-1630 issue affects ClamAV prior to version 0.88.1. The vulnerability is an invalid memory access within the cli_bitset_set() function in libclamav/others.c, which can allow a remote attacker to trigger a denial of service. A fix is available in 0.88.1 and later releases; upgrading to...
Security fix for the ALT Linux 8 package clamav version 0.88.1-alt1
April 6, 2006 Victor Forsyuk 0.88.1-alt1 - 0.88.1 - Fixed CVE-2006-1614, CVE-2006-1615 and CVE-2006-1630. - Patches for clamav-milter from Sergey Y. Afonin...
Security fix for the ALT Linux 10 package clamav version 0.88.1-alt1
April 6, 2006 Victor Forsyuk 0.88.1-alt1 - 0.88.1 - Fixed CVE-2006-1614, CVE-2006-1615 and CVE-2006-1630. - Patches for clamav-milter from Sergey Y. Afonin...
Security fix for the ALT Linux 9 package clamav version 0.88.1-alt1
April 6, 2006 Victor Forsyuk 0.88.1-alt1 - 0.88.1 - Fixed CVE-2006-1614, CVE-2006-1615 and CVE-2006-1630. - Patches for clamav-milter from Sergey Y. Afonin...
[SECURITY] [DSA 1024-1] New clamav packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1024-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 5th, 2006 http://www.debian.org/security/faq -...
DSA-1024-1 clamav - heap overflow
Bulletin has no description...
CVE-2005-1630
Technical details for CVE-2005-1630 are not publicly available in the provided documents; no concrete affected products, impact, vectors, or fixes are specified. Monitor for updates.
CVE-2005-1630
Unknown vulnerability in Attachment Mod before 2.3.13, related to a "serious issue with realnames," has unknown impact and attack vectors...
CVE-2002-1630
The CVE-2002-1630 entry affects Oracle 9i Application Server (9iAS). The vulnerability is in the sendmail.jsp sample page, described as allowing remote attackers to send arbitrary emails. Public details in the provided documents confirm the affected component is the sendmail.jsp page, but there i...
CVE-2004-1630
The CVE-2004-1630 entry documents a Cross-site Scripting (XSS) vulnerability in Open WorkFlow Engine (OpenWFE) 1.4.x. The issue is triggered in the login form via the url parameter, allowing remote attackers to run arbitrary web script or HTML in a user’s browser. Impact is partial against integr...
