DTSA-101-1 clamav - several vulnerabilities

Bulletin has no description...

Information disclosure

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...

CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...

CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...

CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...

CVE-2007-6029

CVE-2007-6029 affects ClamAV 0.91.1 and 0.91.2. The vulnerability allows remote attackers to execute arbitrary code by sending a crafted e-mail message. The description in multiple sources notes that the advisory originated from a vulnerability information seller and that the CVE has been assigne...

Fedora 7 : clamav-0.90.3-1.fc7 (2007-1154)

Can't reach the maintainer, so pushing this myself, given it's a security related update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 7 : clamav-0.91.2-2.fc7 (2007-2050)

Sat Aug 25 2007 Enrico Scholz - 0.91.2-2 - fixed an open2 issue - Sat Aug 25 2007 Enrico Scholz - 0.91.2-1 - updated to 0.91.2 SECURITY : - CVE-2007-4510 DOS in RTF parser - DOS in html normalizer - arbitrary command execution by special crafted recipients in clamav-milter's black-hole mode Note...

Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096)

The binary of the presumably not widely used Windows software "Virtual Floppy Drive 2.1" http://chitchat.at.infoseek.co.jp/vmware/vfd.html ships with a vfd.dll that is statically linked against zlib 1.2.2 http://www.zlib.net/ which is vulnerable to CAN-2005-2096. A scan with ClamAV against the...

openSUSE 10 Security Update : clamav (clamav-1844)

This versionupdate to 0.88.3 fixes small bugs. Among others a problem with large binhex files has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-1844. The text description ...

openSUSE 10 Security Update : clamav (clamav-2700)

This update brings clamav to the security update version 0.90.1. It contains some bugfixes and enhancements, also the major libclam.so version got increased which should have happened for 0.90. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE 10 Security Update : clamav (clamav-3893)

This clamav version update to 0.91 fixes among other things the long startup time of it's predecessor. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-3893. The text description of this...

openSUSE 10 Security Update : clamav (clamav-3540)

This update of ClamAV fixes several security bugs. - wrong calculation of buffer-end - use strict permissions for temporary files - heap corruption causing denial-of-service with corrupted rar archive - detect block list loop %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

openSUSE 10 Security Update : clamav (clamav-2180)

Two security problems have been found and fixed in the antivirus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute code. CVE-2006-4182: A problem in dealing with PE Portable Executables aka Windo...

openSUSE 10 Security Update : clamav (clamav-1941)

This Versionupdate to 0.88.4 fixes among other things a security relevant buffer overflow in the UPX-Decoder. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-1941. The text description ...

openSUSE 10 Security Update : clamav (clamav-2632)

This update to ClamAV version 0.90 fixes various bugs : CVE-2007-0897: A filedescriptor leak in the handling of CAB files can lead to a denial of service attack against the clamd scanner daemon caused by remote attackers. CVE-2007-0898: A directory traversal in handling of MIME E-Mail headers cou...

openSUSE 10 Security Update : clamav (clamav-2242)

The virus scan engine ClamAV was update to version 0.88.6. Following issues are fixed by this update : - freshclam: apply timeout patch from Everton da Silva Marques new options: ConnectTimeout and ReceiveTimeout - clamd: change stack size at the right place closes clamav bug103 -...

openSUSE 10 Security Update : klamav (klamav-4176)

This update of klamav removes the clamav code from the package. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update klamav-4176. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : clamav (clamav-2391)

This update to ClamAV version 0.88.7 fixes various bugs : CVE-2006-5874: Clam AntiVirus ClamAV allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a NULL pointer dereference. CVE-2006-6481: Clam AntiVirus ClamAV 0.88.6 allowed...

openSUSE 10 Security Update : klamav (klamav-2640)

This updates klamav to the newly released version 0.41 which supports clamav 0.90 and newer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update klamav-2640. The text description of this plugin is...