3891 matches found
CVE-2008-1387
ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...
CVE-2008-1837
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats...
CVE-2008-1835
CVE-2008-1835 affects ClamAV up to version 0.93. The issue allows remote attackers to bypass the scanning engine by supplying a RAR file with an invalid version number that ClamAV cannot parse but can be extracted by WinRAR. The vulnerability is documented across multiple advisories (Mandriva, SU...
CVE-2008-1836
CVE-2008-1836 affects ClamAV (libclamav) prior to version 0.93. The vulnerability arises in the rfc2231 handling in message.c, where crafting a message can produce a non-null-terminated string and trigger a buffer over-read, potentially impacting availability via a crash. Connected security entri...
CVE-2008-1837
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats...
CVE-2008-1837
CVE-2008-1837 affects ClamAV (libclamunrar) prior to 0.93. The vulnerability allows remote attackers to crash the scanner by providing crafted RAR files that trigger memory problems, as demonstrated by the PROTOS GENOME test suite for Archive Formats. The issue is addressed in ClamAV 0.93 and rel...
CVE-2008-1387
ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...
CVE-2008-1387
CVE-2008-1387 affects ClamAV up to version 0.93, where a crafted ARJ archive can cause CPU-based denial of service. Public sources in the connected data corroborate that ClamAV prior to 0.93 was susceptible, and advisories (e.g., Mandriva MDVSA-2008:088) describe the vulnerability as fixed in the...
CVE-2008-1835
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar...
CVE-2008-1836
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read...
CVE-2008-1387
ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...
CVE-2008-1835
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar...
CVE-2008-1836
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read...
CVE-2008-1837
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats...
CVE-2008-0314
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...
CVE-2008-1833
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...
CVE-2008-0314
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...
CVE-2008-0314
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...