ClamAV petite.c无效内存访问绝服务漏洞

BUGTRAQ ID: 29750 CVECAN ID: CVE-2008-2713 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/petite.c文件中存在拒绝服务漏洞，如果用户受骗打开了特制的Petite加壳可执行程序的话，就会在以下代码段的memcpy中触发越界读取，导致拒绝服务的情况： cliwriteint32curpe+0x24, 0xffffffff; memcpypefile+rawbase, buffer+sectionsi.raw, sectionsi.rsz;...

DTSA-138-1 clamav - denial of service

Bulletin has no description...

Out-of-bounds

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

DEBIAN-CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

CVE-2008-2713

CVE-2008-2713 affects libclamav/petite.c in ClamAV prior to 0.93.1. A remote attacker can trigger an out-of-bounds read by supplying a crafted Petite file, leading to a denial of service. The issue is rooted in Petite file handling and is mitigated by upgrading to ClamAV 0.93.1 or later, which in...

CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

GLSA-200805-19 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200805-19 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been reported: Damian Put reported a heap-based buffer overflow when processing PeSpin packed PE binaries CVE-2008-0314. Alin Rad Pop of Secunia Research...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Multiple vulnerabilities have been reported: Damian Put reported a heap-based buffer overflow when processing PeSpin packed PE binaries CVE-2008-0314. Alin Rad Po...

Fedora 9 : clamav-0.93-1.fc9 (2008-3900)

Security update - upgrade to upstream version 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1836 442744: DoS via not null terminated string in...

Fedora 8 : clamav-0.92.1-2.fc8 (2008-3420)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...

Fedora 7 : clamav-0.92.1-2.fc7 (2008-3358)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...

[SECURITY] Fedora 7 Update: clamav-0.92.1-2.fc7

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5200)

This version upgrade of ClamAV to 0.93 fixes a long list of vulnerabilities. These vulnerabilities can lead to remote code execution, bypassing the scanning engine, remote denial-of-service, local file overwrite. CVE-2008-1837 / CVE-2008-1836 / CVE-2008-1835 / CVE-2008-1833 / CVE-2008-1387 /...

openSUSE 10 Security Update : klamav (klamav-5206)

clamav has been updated due to security problems. The version number of the clamav library has been changed with that update. Therefore programs like klamav that are linked against libclamav need to be updated as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE 10 Security Update : clamav (clamav-5199)

This version upgrade of ClamAV to 0.93 fixes a long list of vulnerabilities. These vulnerabilities can lead to remote code execution, bypassing the scanning engine, remote denial-of-service, local file overwrite. CVE-2008-1837, CVE-2008-1836, CVE-2008-1835, CVE-2008-1833, CVE-2008-1387,...

Debian DSA-1549-1 : clamav - buffer overflows

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0314 Damian Put discovered that a buffer overflow in the handler for PeSpin binaries may lead to the execution of...