ClamAV antivirus multiple security vulnerabilities

Memory corruption on PDF and PE parsing...

USN-1031-1: ClamAV vulnerabilities

Arkadiusz Miskiewicz and others discovered that the PDF processing code in libclamav improperly validated input. This could allow a remote attacker to craft a PDF document that could crash clamav or possibly execute arbitrary code. CVE-2010-4260, CVE-2010-4479 It was discovered that an off-by-one...

SuSE 11 / 11.1 Security Update : clamav (SAT Patch Numbers 3645 / 3646)

This is an update of clamav to version 0.96.5 to fix : - Denial of service bugs while parsing PDFs. CVE-2010-4260 - Memory corruption due to an off-by-one error within the iconcb function CVE-2010-4261 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

ClamAV < 0.96.5 Multiple Vulnerabilities

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.96.5. Such versions are reportedly affected by multiple vulnerabilities : - Multiple errors exist in the PDF processing functions in 'libclamav/pdf.c', which could lead to application crashes. Bugs 2358, 238...

Ubuntu 10.04 LTS / 10.10 : clamav vulnerabilities (USN-1031-1)

Arkadiusz Miskiewicz and others discovered that the PDF processing code in libclamav improperly validated input. This could allow a remote attacker to craft a PDF document that could crash clamav or possibly execute arbitrary code. CVE-2010-4260, CVE-2010-4479 It was discovered that an off-by-one...

SuSE9 Security Update : clamav (YOU Patch Number 12666)

This is an update of clamav to version 0.96.5 to fix : - Denial of service bugs while parsing PDFs. CVE-2010-4260 - Memory corruption due to an off-by-one error within the iconcb function. CVE-2010-4261 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

Mandriva Linux Security Advisory : clamav (MDVSA-2010:249)

Multiple vulnerabilities were discovered and corrected in clamav : Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document CVE-2010-4260,...

Fedora 14 : clamav-0.96.5-1400.fc14 (2010-18568)

Sat Dec 4 2010 Enrico Scholz - 0.96.5-1400 - updated to 0.96.5 - CVE-2010-4260 Multiple errors within the processing of PDF files can be exploited to e.g. cause a crash. - CVE-2010-4261 An off-by-one error within the 'iconcb' function can be exploited to cause a memory corruption. - Sun Oct 31...

CVE-2010-4479

Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka "bb 2380," a different vulnerability than CVE-2010-4260...

CVE-2010-4260

Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka 1 "bb 2358" and 2 "bb 2396."...

DEBIAN-CVE-2010-4261

Off-by-one error in the iconcb function in peicons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third...

DEBIAN-CVE-2010-4260

Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka 1 "bb 2358" and 2 "bb 2396."...

CVE-2010-4261

Off-by-one error in the iconcb function in peicons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third...

Code injection

Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka "bb 2380," a different vulnerability than CVE-2010-4260...

Memory corruption

Off-by-one error in the iconcb function in peicons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third...

CVE-2010-4260

CVE-2010-4260 affects ClamAV’s pdf.c in libclamav prior to 0.96.5, enabling a crafted PDF to cause an application crash (DoS) or potentially execute code remotely. Multiple advisories (Fedora, openSUSE/SUSE, Gentoo GLSA, Gentoo/Nessus entries) confirm the issue and recommend upgrading to a fixed ...

CVE-2010-4261

CVE-2010-4261 affects ClamAV prior to 0.96.5 due to an off-by-one error in libclamav’s icon_cb function (pe_icons.c). The issue can cause memory corruption and a crash, with potential arbitrary code execution via unspecified vectors. Affected software: ClamAV/libclamav. Root cause: off-by-one in ...

CVE-2010-4261

Off-by-one error in the iconcb function in peicons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third...

CVE-2010-4479

Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka "bb 2380," a different vulnerability than CVE-2010-4260...

CVE-2010-4260

Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka 1 "bb 2358" and 2 "bb 2396."...