FreeBSD Ports: clamav

The remote host is missing an update to the system as announced in the referenced advisory. VID da5c4072-8082-11dd-9c8c-001c2514716c OpenVAS Vulnerability Test $ Description: Auto generated from VID da5c4072-8082-11dd-9c8c-001c2514716c Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD : clamav -- CHM Processing Denial of Service (da5c4072-8082-11dd-9c8c-001c2514716c)

Hanno Boeck reports : A fuzzing test showed weakness in the chm parser of clamav, which can possibly be exploited. The clamav team has disabled the chm module in older versions though freshclam updates and has released 0.94 with a fixed parser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

CVE-2008-3912

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

DEBIAN-CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

DEBIAN-CVE-2008-3912

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

Null pointer dereference

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

Design/Logic Flaw

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

CVE-2008-3912

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

Design/Logic Flaw

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

ClamAV多个未明内存破坏漏洞

BUGTRAQ ID: 31051 CVE ID：CVE-2008-3914 CVE-2008-3913 CVE-2008-3912 CNCVE ID：CNCVE-20083914 CNCVE-20083913 CNCVE-20083912 ClamAV是一款反病毒应用程序。 ClamAV存在多个未明内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，或可能导致敏感信息泄漏或执行任意代码。 目前没有详细漏洞细节提供。 Pardus Linux 2008 0 Pardus Linux 2007 0 ifenslave ifenslave 0.88 Clam Anti-Virus...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5579)

This version update to 0.94 fixes numerous problems including some security relevant ones. CVE-2008-3912 / CVE-2008-1389 / CVE-2008-3913 / CVE-2008-3914 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

ClamAV 'chmunpack.c'非法内存访问远程拒绝服务漏洞

BUGTRAQ ID: 30994 CVE ID：CVE-2008-1389 CNCVE ID：CNCVE-20081389 ClamAV是一款反病毒应用程序。 ClamAV处理畸形CHM文件存在非法内存访问错误，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 问题存在于'chmunpack.c'中，畸形的CHM文件，诱使ClamAV处理可触发此漏洞。 ifenslave ifenslave 0.88 Clam Anti-Virus ClamAV 0.93.1 Clam Anti-Virus ClamAV 0.92.1 Clam Anti-Virus ClamAV 0.91.2 Cl...

CVE-2008-3912

CVE-2008-3912 affects ClamAV’s libclamav in versions before 0.94, causing a denial of service via an out-of-memory condition that can trigger a NULL pointer dereference and application crash. Connected advisories align on this being a memory-related vulnerability in the CLAMAV 0.94 series; open-s...

CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...