3894 matches found
[USN-2423-1] ClamAV vulnerabilities
========================================================================== Ubuntu Security Notice USN-2423-1 November 26, 2014 clamav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Fedora Update for clamav FEDORA-2014-15463
Check the version of clamav SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868522";...
Fedora 19 : clamav-0.98.5-1.fc19 (2014-15463)
ClamAV 0.98.5 ============= ClamAV 0.98.5 also includes these new features and bug fixes : - Support for the XDP file format and extracting, decoding, and scanning PDF files within XDP files. Addition of shared library support for LLVM versions 3.1 - 3.5 for the purpose of just-in-timeJIT...
DLA-95-1 clamav - security update
Bulletin has no description...
Ubuntu 14.04 LTS : ClamAV vulnerabilities (USN-2423-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2423-1 advisory. Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript files. An attacker could possibly use this issue to cause ClamAV to crash,...
USN-2423-1: ClamAV vulnerabilities
Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript files. An attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2013-6497 Damien Millescamp discovered that ClamAV incorrectly handled...
USN-2423-1 clamav vulnerabilities
Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript files. An attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2013-6497 Damien Millescamp discovered that ClamAV incorrectly handled...
Updated clamav packages fix security vulnerabilities
Certain javascript files causes ClamAV to segfault when scanned with the -a list archived files CVE-2013-6497. A heap buffer overflow was reported in ClamAV when scanning a specially crafted y0da Crypter obfuscated PE file CVE-2014-9050. ClamAV has been updated to version 0.98.5 to address these...
MGASA-2014-0487 Updated clamav packages fix security vulnerabilities
Certain javascript files causes ClamAV to segfault when scanned with the -a list archived files CVE-2013-6497. A heap buffer overflow was reported in ClamAV when scanning a specially crafted y0da Crypter obfuscated PE file CVE-2014-9050. ClamAV has been updated to version 0.98.5 to address these...
UBUNTU-CVE-2014-9050
Heap-based buffer overflow in the cliscanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service crash via a crafted y0da Crypter PE file...
Fedora 20 : clamav-0.98.5-1.fc20 (2014-15473)
ClamAV 0.98.5 ============= ClamAV 0.98.5 also includes these new features and bug fixes : - Support for the XDP file format and extracting, decoding, and scanning PDF files within XDP files. Addition of shared library support for LLVM versions 3.1 - 3.5 for the purpose of just-in-timeJIT...
Fedora Update for clamav FEDORA-2014-15473
Check the version of clamav SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868506";...
ClamAV < 0.98.5 Multiple Vulnerabilities
According to its version, the ClamAV clamd antivirus daemon on the remote host is prior to 0.98.5. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to using the 'clamscan -a' command to scan certain JavaScript files that could cause the applicati...
Mandriva Linux Security Advisory : clamav (MDVSA-2014:217)
ClamAV 0.98.5 addresses several reported potential security bugs. Certain JavaScript files causes ClamAV to segfault when scanned with the -a list archived files CVE-2013-6497. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
clamav: denial of service
It was discovered that clamav crashes on certain files when using 'clamscan -a' or while scanning maliciously crafted files...
ClamAV Milter 0.92.2 Blackhole-Mode 远程代码执行漏洞
No description provided by source...
ClamAV Daemon 0.65 Malformed UUEncoded Message Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9610/info A problem in the handling of specially crafted UUEncoded messages has been identified in ClamAV. Because of this, an attacker may prevent the delivery of e-mail to users. Save the following file to /clamtest.mbo...
ClamAV Milter Blackhole-Mode Remote Code Execution
No description provided by source. $Id: clamavmilterblackhole.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
ClamAV < 0.94.2 (JPEG Parsing) Recursive Stack Overflow PoC
No description provided by source. / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file and the same jpeg...
Multiple Vendors - RAR Handling Remote Null Pointer Dereference Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24866/info Multiple applications using RAR are prone to a NULL-pointer dereference vulnerability. A successful attack will result in denial-of-service conditions. Attackers may also be able to exploit this issue to execut...