Fedora 9 : clamav-0.93.3-2.fc9 (2008-9644)

Security fixes from upstream 0.94 and 0.94.1: CVE-2008-1389 461461: Invalid memory access in the CHM unpacker CVE-2008-3912 461461: Multiple out-of-memory NULL pointer dereferences CVE-2008-3913 461461: Fix memory leak in the error code path in freshclam CVE-2008-3914 461461: Multiple file...

Fedora 8 : clamav-0.92.1-4.fc8 (2008-9651)

Security fixes from upstream 0.94 and 0.94.1: CVE-2008-3912 461461: Multiple out-of-memory NULL pointer dereferences CVE-2008-3913 461461: Fix memory leak in the error code path in freshclam CVE-2008-3914 461461: File descriptor leak on the error code path CVE-2008-5050 470783: getunicodename...

[SECURITY] Fedora 9 Update: clamav-0.93.3-2.fc9

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

DEBIAN-CVE-2008-5050

Off-by-one error in the getunicodename function libclamav/vbaextract.c in Clam Anti-Virus ClamAV before 0.94.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow...

CVE-2008-5050

Off-by-one error in the getunicodename function libclamav/vbaextract.c in Clam Anti-Virus ClamAV before 0.94.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow...

CVE-2008-5050

CVE-2008-5050 affects ClamAV prior to version 0.94.1, with an off-by-one/ heap-based buffer overflow in get_unicode_name() (libclamav/vba_extract.c) that can crash or potentially allow remote code execution via a crafted VBA project file. Remediation is upgrading to 0.94.1 or newer; multiple advi...

ClamAV get_unicode_name()单字节堆溢出漏洞

BUGTRAQ ID: 32207 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV中负责解析VBA项目文件的代码中存在单字节堆溢出漏洞，如果用户发送了带有恶意附件的邮件的话，就可能导致以clamd进程的权限执行任意指令。 具体来讲，向libclamav/vbaextract.c中的getunicodename函数传送了特定的name缓冲区就可以触发这个溢出： 101 static char 102 getunicodenameconst char name, int size, int bigendian 103 104 int i,...

ClamAV get_unicode_name() off-by-one buffer overflow

----------------------------------------------------------------- ClamAV getunicodename off-by-one buffer overflow Copyright c 2008 Moritz Jodeit [email protected] 2008/11/08 ----------------------------------------------------------------- Application details: From http://www.clamav.net/: "Clam...

FreeBSD : clamav -- off-by-one heap overflow in VBA project parser (24b64fb0-af1d-11dd-8a16-001b1116b350)

Advisory from Moritz Jodeit, November 8th, 2008 : ClamAV contains an off-by-one heap overflow vulnerability in the code responsible for parsing VBA project files. Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the clamd' process by sending an emai...

ClamAV < 0.94.1 get_unicode_name() Off-by-One Buffer Overflow

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.94.1. Such versions have an off-by-one heap overflow vulnerability in the code responsible for parsing VBA project files, specifically in the 'getunicodename' function of 'libclamav/vbaextract.c', when a...

ClamAV antivirus buffer overflow

Buffer overflowon VBS files parsing...

ClamAV < 0.94.1 get_unicode_name() Function Off-by-One Buffer Overflow (deprecated)

Binary data 4744.prm...

clamav -- off-by-one heap overflow in VBA project parser

Advisory from Moritz Jodeit, November 8th, 2008: ClamAV contains an off-by-one heap overflow vulnerability in the code responsible for parsing VBA project files. Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the clamd' process by sending an email...

Debian Security Advisory DSA 1660-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1660-1. OpenVAS Vulnerability Test $Id: deb16601.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1660-1 clamav Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1660-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1660-1 : clamav - NULL pointer dereference, resource exhaustion

Several denial-of-service vulnerabilities have been discovered in the ClamAV anti-virus toolkit : Insufficient checking for out-of-memory conditions results in NULL pointer dereferences CVE-2008-3912 . Incorrect error handling logic leads to memory leaks CVE-2008-3913 and file descriptor leaks...

[SECURITY] [DSA 1660-1] New clamav packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1660-1 [email protected] http://www.debian.org/security/ Florian Weimer October 26, 2008 http://www.debian.org/security/faq -...

DSA-1660-1 clamav - denial of service

Bulletin has no description...

Mac OS X Multiple Vulnerabilities (Security Update 2008-007)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-007 applied. This security update contains fixes for the following products : - Apache - Certificates - ClamAV - ColorSync - CUPS - Finder - launchd - libxslt - MySQL Server - Networking - PH...

Gentoo Security Advisory GLSA 200809-18 (clamav)

The remote host is missing updates announced in advisory GLSA 200809-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...