CVE-2007-3023

CVE-2007-3023 is discussed in multiple connected sources as part of the ClamAV vulnerabilities list. The Debian advisory (DSA-1320-1) and related OpenVAS entries describe several issues in ClamAV, including: (1) the NsPack decompression path not sanitising an internal length variable, potentially...

CVE-2007-3123

CVE-2007-3123 affects libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1. The issue arises in the RAR decompression path where header value validation is insufficient, leading to a heap-based buffer overflow and potential denial of service (core dump) when processing crafted RAR files with...

CVE-2007-3123

unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service core dump via a crafted RAR file with a modified vmcodesize value, which triggers a heap-based buffer overflow...

CVE-2007-3122

The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR...

CVE-2007-3023

unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors...

CVE-2007-3023

unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors...

CVE-2007-3122

The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR...

[ MDKSA-2007:115 ] - Updated clamav packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:115 http://www.mandriva.com/security/ Package : clamav Date : June 4, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability in the OLE2 parser in ClamAV was found...

ClamAV antivirus DoS

Resources exhaustion on OLE2 documents parsing...

Mandrake Linux Security Advisory : clamav (MDKSA-2007:115)

A vulnerability in the OLE2 parser in ClamAV was found that could allow a remote attacker to cause a denial of service via resource consumption with a carefully crafted OLE2 file. Other vulnerabilities and bugs have also been corrected in 0.90.3 which is being provided with this update...

ClamAV < 0.90.3 Multiple Vulnerabilities (deprecated)

Binary data 4075.prm...

SUSE-SA:2007:026: clamav

The remote host is missing the patch for the advisory SUSE-SA:2007:026 clamav. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:026 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:017: clamav

The remote host is missing the patch for the advisory SUSE-SA:2007:017 clamav. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:017 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

DTSA-37-1 clamav - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

SOL6795 - ClamAV CHM Chunk Name Length DoS Vulnerability - CVE-2006-5295

The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access using the ClamAV open source software. A vulnerability in ClamAV 0.88.4 and earlier versions could allow a remote attacker to crash the scanner process using a specially crafted...

SOL6804 - ClamAV Portable Executable heap overflow Vulnerability - CVE-2006-4182

The FirePass controller provides anti-virus scanning of files uploaded through Portal Access from the ClamAV open source software . Scanning is enabled by selecting the Enable Standalone Virus Scanner option button on the Antivirus tab of the Portal Access: Content Inspection page. A vulnerabilit...

DEBIAN-CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

CVE-2007-2650

CVE-2007-2650 affects ClamAV’s OLE2 parser. A crafted OLE2/DOC can trigger DoS via (1) large property size or (2) an infinite loop in the FAT file block chain, as documented. Connected advisories note ClamAV updates/resolutions to mitigate this issue (example: Debian security advisory DSA 1320-1 ...