Ubuntu: Security Advisory (USN-1482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1482-2: ClamAV regression

USN-1482-1 fixed vulnerabilities in ClamAV. The updated packages could fail to install in certain situations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote...

Ubuntu 11.04 / 11.10 / 12.04 LTS : clamav regression (USN-1482-2)

USN-1482-1 fixed vulnerabilities in ClamAV. The updated packages could fail to install in certain situations. This update fixes the problem. We apologize for the inconvenience. It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote attacker could create a...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : clamav vulnerabilities (USN-1482-1)

It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote attacker could create a specially crafted TAR file containing malware that could escape being detected. CVE-2012-1457, CVE-2012-1459 It was discovered that ClamAV incorrectly handled certain malformed CHM...

USN-1482-1: ClamAV vulnerabilities

It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote attacker could create a specially-crafted TAR file containing malware that could escape being detected. CVE-2012-1457, CVE-2012-1459 It was discovered that ClamAV incorrectly handled certain malformed CHM...

FreeBSD : clamav -- multiple vulnerabilities (eb12ebee-b7af-11e1-b5e0-000c299b62e1)

MITRE Advisories report : The TAR parser allows remote attackers to bypass malware detection via a POSIX TAR file with an initial aliases character sequence. The TAR parser allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR...

Mobipocket Reader CHM File Handling Remote Overflow

All versions of Mobipocket Reader are potentially affected by a stack-based buffer overflow vulnerability. The application does not properly validate user input and can allow crafted 'CHM' files to either crash the application or execute arbitrary code if an attack is successful. Note that...

BeyondCHM 1.1 - Buffer Overflow

BeyondCHM 1.1 - Buffer Overflow -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= BeyondCHM 1.1 Buffer Overflow price 32.56 EUR Url:...

Mobipocket Reader '.CHM'文件远程栈缓冲区溢出漏洞

Mobipocket Reader是一款电子书浏览器 Mobipocket Reader不正确处理.chm文件，特制的.chm文件可触发基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码 0 Amazon.com Mobipocket Reader 6.2 Build 608 厂商解决方案 目前没有详细解决方案提供： http://www.mobipocket.com/en/HomePage/default.asp?Language=EN...

BeyondCHM 1.1 - Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= BeyondCHM 1.1 Buffer Overflow price 32.56 EUR Url: http://www.beyondchm.com/ Author: shinnai...

Mobipocket Reader 6.2 Build 608 Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= Mobipocket Reader version 6.2 Build 608 Buffer Overflow Url:...

SumatraPDF 2.0.1 - .chm .mobi Memory Corruption

SumatraPDF 2.0.1 - .chm .mobi Memory Corruption -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= SumatraPDF v2.0.1 chm and mobi files memory...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

Design/Logic Flaw

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1458

The CVE-2012-1458 issue affects the CHM file parser in ClamAV (v0.96.4) and Sophos Anti-Virus (v4.61.0), allowing remote bypass of malware detection via a crafted reset interval in the CHM file’s LZXC header. Publicly linked advisories and OpenVAS/Nessus entries confirm this as a vulnerability ti...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

CVE-2012-1458

The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

clamav -- multiple vulnerabilities

MITRE Advisories report: The TAR parser allows remote attackers to bypass malware detection via a POSIX TAR file with an initial aliases character sequence. The TAR parser allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR fi...