ALPINE-CVE-2017-12378

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar Tape Archive files...

ALPINE-CVE-2017-12380

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mai...

CVE-2017-12376

ClamAV versions up to 0.99.2 contain a PDF handling vulnerability (handle_pdfname buffer overflow in pdf.c) that could allow DoS or remote code execution after processing a crafted PDF. Multiple advisories and upstream notices confirm CVE-2017-12376 and correlated fixes; the upstream upgrade to 0...

CVE-2017-12376

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12377

ClamAV 0.99.2 and earlier are affected by CVE-2017-12377 due to improper input validation in mew packet processing, causing a heap-based over-read/DoS and potential arbitrary code execution when scanning crafted files. The vulnerability is remote and unauthenticated. Upstream advisories and secur...

CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12378

CVE-2017-12378 affects ClamAV before 0.99.3 (0.99.2 and prior). The issue is an input validation weakness when handling TAR files, leading to a checksum buffer over-read during scanning of malicious tar archives and resulting in DoS on the affected device. Connected sources also identify related ...

CVE-2017-12374

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail...

CVE-2017-12380

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms in mbox.c during certain mai...

CVE-2017-12375

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail...

CVE-2017-12376

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12379

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12375

CVE-2017-12375 affects ClamAV before 0.99.3, where improper input validation in the rfc2047 handling of mbox.c can be exploited by a crafted email to trigger a buffer overflow and cause DoS on an affected device. Documents confirm the vulnerability is remote, unauthenticated, and tied to mail par...

CVE-2017-12378

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar Tape Archive files...

CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12374

CVE-2017-12374 affects ClamAV before 0.99.3, with a vulnerability in mail parsing (mbox.c) that can cause a use-after-free and DoS when processing crafted emails. The issue stems from insufficient input validation during certain mail parsing operations, allowing an unauthenticated, remote attacke...

CVE-2017-12375

The ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of input validation checking mechanisms during certain mail...

CVE-2017-12378

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar Tape Archive files...

CVE-2017-12379

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12380

CVE-2017-12380 affects ClamAV versions 0.99.2 and earlier. The root cause is improper input validation in mbox.c during certain mail parsing functions, allowing an unauthenticated remote attacker to send a crafted email that triggers a NULL pointer dereference and causes a DoS. The issue is remed...