Multiple Vendors - RAR Handling Remote Null Pointer Dereference Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24866/info Multiple applications using RAR are prone to a NULL-pointer dereference vulnerability. A successful attack will result in denial-of-service conditions. Attackers may also be able to exploit this issue to execut...

ClamAV < 0.94.2 (JPEG Parsing) Recursive Stack Overflow PoC

No description provided by source. / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file and the same jpeg...

Sendmail with clamav-milter < 0.91.2 - Remote Root Exploit

No description provided by source. black-hole.pl Sendmail w/ clamav-milter Remote Root Exploit Copyright c 2007 Eliteboy use IO::Socket; print Sendmail w/ clamav-milter Remote Root Exploit\n; print Copyright C 2007 Eliteboy\n; if $ARGV != 0 print Give me a host to connect.\n;exit; print Attacking...

openSUSE Security Update : clamav (openSUSE-SU-2010:0921-1)

clamav version 0.96.3 fixes problems when scanning pdf files CVE-2010-3434 and also contains numerous other bug fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-3230. The text...

openSUSE Security Update : ClamAV (openSUSE-SU-2012:0833-1)

This update addresses possible evasion cases in some archive formats and stability issues in portions of the bytecode engine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-362...

openSUSE Security Update : clamav (openSUSE-SU-2011:1177-1)

This version update of clamav fixes a recursion level crash. CVE-2011-3627 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-5308. The text description of this...

openSUSE Security Update : clamav (openSUSE-SU-2011:0940-1)

New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : clamav (openSUSE-SU-2013:0560-1)

clamav was updated to version 0.97.7 bnc809945 and contains several hardening fixes which might be security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-265. The text...

openSUSE Security Update : clamav (openSUSE-SU-2011:0208-1)

Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue CVE-2011-1003. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

openSUSE Security Update : clamav (openSUSE-SU-2011:1177-1)

This version update of clamav fixes a recursion level crash. CVE-2011-3627 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-5308. The text description of this...

openSUSE Security Update : clamav (openSUSE-SU-2013:0881-1)

New clamav version 0.97.8 bnc816865 : - CVE-2013-2020: Fix heap corruption - CVE-2013-2021: Fix overflow due to PDF key length computation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : clamav (openSUSE-SU-2011:0940-1)

New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : clamav (openSUSE-SU-2010:1041-1)

Upgrade to version clamav 0.96.5 to fix : - CVE-2010-4260: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Denial of service bugs while parsing PDFs. - CVE-2010-4261: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Memory corruption due to an off-by-one error within the iconcb function...

ClamAV Mail Filter Extension Crafted Recipient Command Execution - ver 2 (CVE-2007-4560)

A shell command injection vulnerability has been reported in ClamAV AntiVirus product. The vulnerability is due to an application who processes malicious SMTP commands. An unauthenticated attacker can exploit this vulnerability by delivering a crafted request to the target host, resulting in...

SUSE-SU-2015:0298-1 Recommended update for clamav

The antivirus scanner ClamAV has been updated to version 0.98.3, which includes the following fixes and enhancements: Support for common raw disk image formats using 512 byte sectors, specifically GPT, APM, and MBR partitioning. All ClamAV sockets clamd, freshclam, clamav-milter, clamdscan,...

SUSE-SU-2015:0871-1 Recommended update for clamav

The antivirus scanner ClamAV has been updated to version 0.98.3, which includes the following fixes and enhancements: Support for common raw disk image formats using 512 byte sectors, specifically GPT, APM, and MBR partitioning. All ClamAV sockets clamd, freshclam, clamav-milter, clamdscan,...

GLSA-201405-08 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-08 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted file,...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus ClamAV is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a...

ClamAV Unsupported Version Detection

According to its version, the ClamAV clamd antivirus daemon running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network...

Ubuntu Update for clamav USN-2157-1

Check for the Version of clamav OpenVAS Vulnerability Test $Id: gbubuntuUSN21571.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for clamav USN-2157-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...