CVE-2008-2713

CVE-2008-2713 affects libclamav/petite.c in ClamAV prior to 0.93.1. A remote attacker can trigger an out-of-bounds read by supplying a crafted Petite file, leading to a denial of service. The issue is rooted in Petite file handling and is mitigated by upgrading to ClamAV 0.93.1 or later, which in...

CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

CVE-2008-2713: Undefined Security Weakness

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

GLSA-200805-19 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200805-19 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been reported: Damian Put reported a heap-based buffer overflow when processing PeSpin packed PE binaries CVE-2008-0314. Alin Rad Pop of Secunia Research...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Multiple vulnerabilities have been reported: Damian Put reported a heap-based buffer overflow when processing PeSpin packed PE binaries CVE-2008-0314. Alin Rad Po...

Fedora 9 : clamav-0.93-1.fc9 (2008-3900)

Security update - upgrade to upstream version 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1836 442744: DoS via not null terminated string in...

Fedora 7 : clamav-0.92.1-2.fc7 (2008-3358)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...

Fedora 8 : clamav-0.92.1-2.fc8 (2008-3420)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...

[SECURITY] Fedora 7 Update: clamav-0.92.1-2.fc7

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5200)

This version upgrade of ClamAV to 0.93 fixes a long list of vulnerabilities. These vulnerabilities can lead to remote code execution, bypassing the scanning engine, remote denial-of-service, local file overwrite. CVE-2008-1837 / CVE-2008-1836 / CVE-2008-1835 / CVE-2008-1833 / CVE-2008-1387 /...

openSUSE 10 Security Update : clamav (clamav-5199)

This version upgrade of ClamAV to 0.93 fixes a long list of vulnerabilities. These vulnerabilities can lead to remote code execution, bypassing the scanning engine, remote denial-of-service, local file overwrite. CVE-2008-1837, CVE-2008-1836, CVE-2008-1835, CVE-2008-1833, CVE-2008-1387,...

openSUSE 10 Security Update : klamav (klamav-5206)

clamav has been updated due to security problems. The version number of the clamav library has been changed with that update. Therefore programs like klamav that are linked against libclamav need to be updated as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-1549-1 : clamav - buffer overflows

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0314 Damian Put discovered that a buffer overflow in the handler for PeSpin binaries may lead to the execution of...

ClamAV upack heap buffer overflow vulnerability

Overview The ClamAV anti-virus scanner contains a vulnerability that may allow an attacker to execute code or cause ClamAV to crash. Description The Portable Executable PE file format is a file format for executable files that is used in Microsoft Windows. PE files can be packed with executable...

Debian Security Advisory DSA 1549-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1549-1. OpenVAS Vulnerability Test $Id: deb15491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1549-1 clamav Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1549-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : clamav -- Multiple Vulnerabilities (589d8053-0b03-11dd-b4ef-00e07dc4ec84)

Secunia reports : Some vulnerabilities have been reported in ClamAV, which can be exploited by malicious people to cause a DoS Denial of Service or to compromise a vulnerable system. 1 A boundary error exists within the 'cliscanpe' function in libclamav/pe.c. This can be exploited to cause a...

[SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1549-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 17, 2008 http://www.debian.org/security/faq -...

ClamAV libclamav库PeSpin堆溢出漏洞

BUGTRAQ ID: 28784 CVECAN ID: CVE-2008-0314 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV中负责解压用PeSpin加密所包装的PE库的代码存在堆溢出漏洞，攻击者可能通过诱使用户处理畸形文件控制用户系统。 以下为libclamav/spin.c中的有漏洞代码段： 417 key32 = clireadint32ep+0x2fee; ... 427 clidbgmsg"spin: Resources sect%d appear to be compressed\n\tuncompressed...