Design/Logic Flaw

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

ClamAV多个未明内存破坏漏洞

BUGTRAQ ID: 31051 CVE ID：CVE-2008-3914 CVE-2008-3913 CVE-2008-3912 CNCVE ID：CNCVE-20083914 CNCVE-20083913 CNCVE-20083912 ClamAV是一款反病毒应用程序。 ClamAV存在多个未明内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，或可能导致敏感信息泄漏或执行任意代码。 目前没有详细漏洞细节提供。 Pardus Linux 2008 0 Pardus Linux 2007 0 ifenslave ifenslave 0.88 Clam Anti-Virus...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5579)

This version update to 0.94 fixes numerous problems including some security relevant ones. CVE-2008-3912 / CVE-2008-1389 / CVE-2008-3913 / CVE-2008-3914 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

ClamAV 'chmunpack.c'非法内存访问远程拒绝服务漏洞

BUGTRAQ ID: 30994 CVE ID：CVE-2008-1389 CNCVE ID：CNCVE-20081389 ClamAV是一款反病毒应用程序。 ClamAV处理畸形CHM文件存在非法内存访问错误，远程攻击者可以利用漏洞对服务程序进行拒绝服务攻击。 问题存在于'chmunpack.c'中，畸形的CHM文件，诱使ClamAV处理可触发此漏洞。 ifenslave ifenslave 0.88 Clam Anti-Virus ClamAV 0.93.1 Clam Anti-Virus ClamAV 0.92.1 Clam Anti-Virus ClamAV 0.91.2 Cl...

CVE-2008-3912

CVE-2008-3912 affects ClamAV’s libclamav in versions before 0.94, causing a denial of service via an out-of-memory condition that can trigger a NULL pointer dereference and application crash. Connected advisories align on this being a memory-related vulnerability in the CLAMAV 0.94 series; open-s...

CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

CVE-2008-3913

CVE-2008-3913 affects ClamAV up to version 0.94, specifically memory leaks in freshclam/manager.c that can cause denial of service via memory exhaustion. Disclosures from multiple advisories and Nessus/OpenSUSE/Mandriva Fedora notes tie this CVE to 0.94 release fixes, which address error-path mem...

CVE-2008-3914

ClamAV prior to 0.94 is affected by multiple vulnerabilities related to the error path, including file descriptor leaks and memory-related issues. The CVEs explicitly tied to this family are CVE-2008-1389, CVE-2008-3912, CVE-2008-3913, and CVE-2008-3914, with mentions of out-of-memory null derefe...

CVE-2008-3913

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

CVE-2008-3912

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

CVE-2008-3913: Missing Release of Memory after Effective Lifetime

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service memory consumption via unspecified vectors related to "error handling logic"...

CVE-2008-3914: Exposure of Sensitive Information to an Unauthorized Actor

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

CVE-2008-3912: Undefined Security Weakness

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

ClamAV antivirus CHM files DoS

No description provided...

clamav: Crash with crafted chm, CVE-2008-1389

clamav: Crash with crafted chm, CVE-2008-1389 References https://vulners.com/cve/CVE-2008-1389 http://int21.de/cve/CVE-2008-1389-clamav-chd.html http://www.int21.de/cve/cve-2008-1389-samples.tar.bz2 https://wwws.clamav.net/bugzilla/showbug.cgi?id=1089 Description A fuzzing test showed weakness in...

ClamAV Invalid Memory Access Denial Of Service Vulnerability

The host is running Clam AntiVirus, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodclamavinvalidmemaccessdosvuln900117.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: ClamAV Invalid Memory Access Denial Of Service Vulnerability Authors: Sharath S...

ClamAV < 0.94 Invalid Memory Access DoS Vulnerability

ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...

CVE-2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...