4181 matches found
clamav0941-overflow.txt
const char crashstr = "\xff\xd8" // jpg marker "\xff\xed" // exif data "\x00\x02" // length "Photoshop 3.0\x00" "8BIM" "\x04\x0c" // thumbnail id "\x00" "\x01" "\x01\x01\x01\x01" "0123456789012345678912345678"; // skip over 28 bytes include include include define NRITER 200000 int main FILE fp; i...
Debian DSA-1680-1 : clamav - buffer overflow, stack consumption
Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow and potentially arbitrary code execution CVE-2008-5050 . Ilja van Sprundel discovered that ClamAV contains a denial of service...
DSA-1680-1 clamav - potential code execution
Bulletin has no description...
ClamAV < 0.94.2 (JPG File) Stack Overflow PoC
No description provided by source. const char crashstr = "\xff\xd8" // jpg marker "\xff\xed" // exif data "\x00\x02" // length "Photoshop 3.0\x00" "8BIM" "\x04\x0c" // thumbnail id "\x00" "\x01" "\x01\x01\x01\x01" "0123456789012345678912345678"; // skip over 28 bytes include stdio.h include...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
Design/Logic Flaw
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
DEBIAN-CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
CVE-2008-5314
CVE-2008-5314 is a stack consumption vulnerability in ClamAV prior to 0.94.2. The flaw is in libclamav/special.c where processing crafted JPEG files via functions cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim can exhaust the stack, leading to a denial of service thro...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
ClamAV 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC)
ClamAV 0.94.2 - JPEG Parsing Recursive Stack Overflow PoC / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file...
ClamAV < 0.94.2 (JPEG Parsing) Recursive Stack Overflow PoC
No description provided by source. / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file and the same jpeg...
ClamAV < 0.94.2 (JPEG Parsing) Recursive Stack Overflow PoC
Exploit for multiple platform in category dos / poc =========================================================== ClamAV 0.94.2 JPEG Parsing Recursive Stack Overflow PoC =========================================================== / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and...
ClamAV < 0.94.2 cli_check_jpeg_exploit() Malformed JPEG File DoS
According to its version, the clamd antivirus daemon on the remote host is earlier than 0.94.2. There is a recursive stack overflow involving the JPEG parsing code in such versions. A remote attacker may be able to leverage this issue to cause the application to recursively scan a specially craft...
ClamAV < 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC)
/ There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file and the same jpeg scanning function gets called without...
USN-684-1: ClamAV vulnerability
Ilja van Sprundel discovered that ClamAV did not handle recursive JPEG information. If a remote attacker sent a specially crafted JPEG file, ClamAV would crash, leading to a denial of service...