ClamAV < 0.93.1 Multiple Vulnerabilities

ClamAV is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"; ifdescription...

Debian: Security Advisory (DSA-1497-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200802-09 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200802-09 ClamAV: Multiple vulnerabilities An integer overflow has been reported in the 'cliscanpe' function in file libclamav/pe.c CVE-2008-0318. Another unspecified vulnerability has been reported in file libclamav/mew.c...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description An integer overflow has been reported in the "cliscanpe" function in file libclamav/pe.c CVE-2008-0318. Another unspecified vulnerability has been reported in fil...

openSUSE 10 Security Update : clamav (clamav-5009)

This version upgrade to 0.92.1 fixes numerous flaws including some security problems CVE-2008-0318, CVE-2008-0728. Please note that the version number of the clamav library has changed with version 0.92. Programs linked against older libclamav therefore need to be updated as well. %NASLMINLEVEL...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5008)

This version upgrade to 0.92.1 fixes numerous flaws including some security problems. CVE-2008-0318 / CVE-2008-0728 Please note that the version number of the clamav library has changed in version 0.92. Programs linked against older libclamav therefore need to be updated as well. %NASLMINLEVEL...

Debian DSA-1497-1 : clamav - several vulnerabilities

Several vulnerabilities have been discovered in the Clam anti-virus toolkit, which may lead to the execution of arbitrary code or local denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6595 It was discovered that temporary files ar...

FreeBSD : clamav -- ClamAV libclamav PE File Integer Overflow Vulnerability (be4b0529-dbaf-11dc-9791-000ea6702141)

iDefense Security Advisory 02.12.08 : Remote exploitation of an integer overflow vulnerability in Clam AntiVirus' ClamAV, as included in various vendors' operating system distributions, allows attackers to execute arbitrary code with the privileges of the affected process. The vulnerability exist...

[SECURITY] [DSA 1497-1] New clamav packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1497-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2008 http://www.debian.org/security/faq -...

DSA-1497-1 clamav - several vulnerabilities

Bulletin has no description...

Fedora 7 : clamav-0.92.1-1.fc7 (2008-1608)

contains: - libclamav/mew.c: fix possible heap corruption bb806 - libclamav/pe.c: fix possible integer overflow CVE-2008-0318 contains: - libclamav/mew.c: fix possible heap corruption bb806 - libclamav/pe.c: fix possible integer overflow CVE-2008-0318 Note that Tenable Network Security has...

Fedora 8 : clamav-0.92.1-1.fc8 (2008-1625)

contains: - libclamav/mew.c: fix possible heap corruption bb806 - libclamav/pe.c: fix possible integer overflow CVE-2008-0318 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

iDefense Security Advisory 02.12.08: ClamAV libclamav PE File Integer Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. ClamAV is often integrated into e-mail gateways and used to scan e-mail traffic for viruses. It supports virus scanning...

ClamAV < 0.92.1 Multiple Overflows (deprecated)

Binary data 4375.prm...

ClamAV antivirus integer overflow

Integer overflow on PE files parsing...

CVE-2008-0728

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...

CVE-2008-0318

Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...

DEBIAN-CVE-2008-0318

Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...

Design/Logic Flaw

The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...

CVE-2008-0318

Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...