CVE-2010-3434

The CVE-2010-3434 vulnerability affects ClamAV prior to version 0.96.3, where a buffer overflow in pdf.c:get_stream_bounds (find_stream_bounds) can be triggered by a crafted PDF, leading to denial of service or possibly arbitrary code execution. Several connected advisories confirm the issue and ...

ClamAV < 0.96.3 'find_stream_bounds()' PDF File Processing DoS Vulnerability - Windows

ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...

ClamAV < 0.96.3 DoS

Binary data 5672.prm...

Mandriva Update for clamav MDVA-2010:199 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVA-2010:199 clamav Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for clamav MDVA-2010:199 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVA-2010:199 clamav Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

MDVA-2010:199 : clamav

This is a bugfix release that upgrades clamav to the latest version 0.96.3. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=490 %NASLMINLEVEL 70300 @DEPRECATED@...

Ubuntu: Security Advisory (USN-986-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for clamav vulnerability USN-986-2

Ubuntu Update for Linux kernel vulnerabilities USN-986-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9862.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for clamav vulnerability USN-986-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mandriva Update for bzip2 MDVSA-2010:185 (bzip2)

Check for the Version of bzip2 OpenVAS Vulnerability Test Mandriva Update for bzip2 MDVSA-2010:185 bzip2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Linux Security Advisory : bzip2 (MDVSA-2010:185)

An integer overflow has been found and corrected in bzip2 which could be exploited by using a specially crafted bz2 file and cause a denial of service attack CVE-2010-0405. Additionally clamav has been upgraded to 0.96.2 and has been patched for this issue. perl-Compress-Bzip2 in MES5 has been...

Ubuntu 9.04 / 9.10 / 10.04 LTS : clamav vulnerability (USN-986-2)

USN-986-1 fixed a vulnerability in bzip2. This update provides the corresponding update for ClamAV. An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker could cause bzip2 or any application linked against libbz2...

Debian DSA-2112-1 : bzip2 - integer overflow

Mikolaj Izdebski has discovered an integer overflow flaw in the BZ2decompress function in bzip2/libbz2. An attacker could use a crafted bz2 file to cause a denial of service application crash or potentially to execute arbitrary code. CVE-2010-0405 %NASLMINLEVEL 70300 C Tenable Network Security,...

USN-986-2: ClamAV vulnerability

USN-986-1 fixed a vulnerability in bzip2. This update provides the corresponding update for ClamAV. Original advisory details: An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker could cause bzip2 or any...

[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2112-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 20, 2010 http://www.debian.org/security/faq -...

DSA-2112-1 bzip2 - integer overflow

Bulletin has no description...

Clam AntiVirus: Multiple vulnerabilities

Background Clam AntiVirus short: ClamAV is an anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Multiple vulnerabilities were discovered in Clam AntiVirus. For further information, please consult the CVE entries referenced below. Impact A remote...

Apple Fixes 13 Bugs in Major OS X Patch Release

Apple released a patch Tuesday that fixes more than a dozen bugs, including a critical remote code-execution flaw in Apple Type Services. The patch release also includes a fix for a flaw in CFNetwork that enabled an attacker to intercept user credentials and other sensitive data silently on a...

Apple Releases Security Update 2010-005

Apple has released security update 2010-005 to address multiple vulnerabilities affecting the ATS, CFNetwork, ClamAV, CoreGraphics, libsecurity, PHP, and Samba applications. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, cause a...

Mac OS X Multiple Vulnerabilities (Security Update 2010-005)

The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-005 applied. This security update contains fixes for the following products : - ATS - CFNetwork - ClamAV - CoreGraphics - libsecurity - PHP - Samba C Tenable Network Security, Inc. if...

Fedora 14 : clamav-0.96.1-1401.fc14 (2010-13012)

Update to clamav 0.96.1 which fixes: CVE-2010-1639 Clam AntiVirus: Heap-based overflow, when processing malicious PDF files Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...