CVE-2008-0314

CVE-2008-0314 is discussed in the Mandriva advisory MDVSA-2008:088 as a heap-based buffer overflow in ClamAV 0.92.1’s libclamav (spin.c) that allows remote execution via a crafted PeSpin packed PE binary. The issue is mitigated by upgrading to the newer ClamAV release (0.93+), which addresses thi...

CVE-2008-1833

CVE-2008-1833 describes a heap-based buffer overflow in pe.c of libclamav (ClamAV 0.92.1) that could allow a remote attacker to execute arbitrary code by feeding a crafted WWPack-packed PE binary. Connected advisories document affected products (ClamAV 0.92.x lineage) and indicate a fix in the 0....

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

ClamAV antivirus multiple security vulnerabilities

Endless loop on ARJ files handling. Heap buffer overflow on WWPack'ed and PeSpin'ed PE files...

[Full-disclosure] clamav: Endless loop / hang with crafter arj, CVE-2008-1387

Advisory published at: http://int21.de/cve/CVE-2008-1387-clamav.html clamav: Endless loop / hang with crafter arj, CVE-2008-1387 References https://vulners.com/cve/CVE-2008-1387 http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog...

ClamAV < 0.93.0 Multiple Overflows (deprecated)

Binary data 4465.prm...

Security fix for the ALT Linux 9 package clamav version 0.93-alt1

April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...

ClamAV libclamav/pe.c UPACK文件处理堆溢出漏洞

BUGTRAQ ID: 28756 CVECAN ID: CVE-2008-1100 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/pe.c文件中的cliscanpe函数在处理特制Upack可执行程序时存在堆溢出漏洞，如果杀毒软件检测到了恶意的Upack文件时就会触发这个溢出，导致执行任意指令。 ClamAV ClamAV 0.92.1 ClamAV ClamAV 0.92 ClamAV ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.clamav.net/...

Security fix for the ALT Linux 8 package clamav version 0.93-alt1

April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...

Security fix for the ALT Linux 10 package clamav version 0.93-alt1

April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...

clamav -- Multiple Vulnerabilities

Secunia reports: Some vulnerabilities have been reported in ClamAV, which can be exploited by malicious people to cause a DoS Denial of Service or to compromise a vulnerable system. 1 A boundary error exists within the "cliscanpe" function in libclamav/pe.c. This can be exploited to cause a...

CVE-2008-1100

Buffer overflow in the cliscanpe function in libclamav libclamav/pe.c for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file...

DEBIAN-CVE-2008-1100

Buffer overflow in the cliscanpe function in libclamav libclamav/pe.c for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file...

CVE-2008-1100

Buffer overflow in the cliscanpe function in libclamav libclamav/pe.c for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file...

CVE-2008-1100

Buffer overflow in the cliscanpe function in libclamav libclamav/pe.c for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file...

ClamAV Milter Blackhole-Mode Remote Code Execution

This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...

ClamAV < 0.93.1 vulnerability

The remote host is probably affected by the vulnerabilities described in CVE 2007-6335 CVE 2007-6336 CVE 2007-6337 CVE-2008-0318 CVE-2008-1100 CVE-2008-1387 CVE-2008-2713 Impact CVE 2008-2713 libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a...