3891 matches found
CVE-2007-0897
CVE-2007-0897 affects ClamAV (clamav); the issue is due to not closing open file descriptors when processing CAB archives with a cabinet header length of zero, leading to denial of service via file descriptor exhaustion. OpenVAS/OpenVulnerability entries reference this CVE alongside related issue...
CVE-2007-0898
CVE-2007-0898: A directory traversal in clamd of ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. in the id MIME header parameter of a multipart message. The vulnerability affects ClamAV’s clamd component; successful exploitation could enable file overwrite with th...
CVE-2007-0898
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...
CVE-2007-0897
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
CVE-2007-0897
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
ClamAV < 0.90.0 Multiple Vulnerabilities (deprecated)
Binary data 3917.prm...
ClamAV antivirus directory traversal
MIME part id is used to form local filename without checking for ../. In addition, there is a DoS on CAB files parsing...
SOL6806 - ClamAV UPX heap overflow Vulnerability - CVE-2006-4018
The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access through the ClamAV open source software. A vulnerability in ClamAV 0.88.4 and earlier versions could allow a remote attacker to crash the scanner process or execute code remotely using...
GLSA-200612-18 : ClamAV: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200612-18 ClamAV: Denial of Service Hendrik Weimer discovered that ClamAV fails to properly handle deeply nested MIME multipart/mixed content. Impact : By sending a specially crafted email with deeply nested MIME multipart/mixed...
ClamAV: Denial of service
Background ClamAV is a GPL virus scanner. Description Hendrik Weimer discovered that ClamAV fails to properly handle deeply nested MIME multipart/mixed content. Impact By sending a specially crafted email with deeply nested MIME multipart/mixed content an attacker could cause ClamAV to crash...
Debian DSA-1238-1 : clamav - several vulnerabilities
Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6406 Hendrik Weimer discovered that invalid characters in base64 encoded data may lead to bypass of scanning...
[SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1238-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 17th, 2006 http://www.debian.org/security/faq -...
Mandrake Linux Security Advisory : clamav (MDKSA-2006:138)
Damian Put discovered a boundary error in the UPX extraction module in ClamAV which is used to unpack PE Windows executables. This could be abused to cause a Denial of Service issue and potentially allow for the execution of arbitrary code with the permissions of the user running clamscan or clam...
FreeBSD : clamav -- Multipart Nestings Denial of Service (eb5124a4-8a20-11db-b033-00123ffe8333)
Secunia reports : Clam AntiVirus have a vulnerability, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to a stack overflow when scanning messages with deeply nested multipart content. This can be exploited to crash the service by sendin...
Debian DSA-1232-1 : clamav - missing sanity checks
Stephen Gran discovered that malformed base64-encoded MIME attachments can lead to denial of service through a NULL pointer dereference. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-123...
CVE-2006-6481
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to cause a denial of service stack overflow and application crash by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406...
CVE-2006-6481
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to cause a denial of service stack overflow and application crash by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406...
DEBIAN-CVE-2006-6481
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to cause a denial of service stack overflow and application crash by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406...
CVE-2006-6481
CVE-2006-6481 affects ClamAV 0.88.6. The vulnerability allows a remote attacker to cause a denial of service through crafted multipart/mixed content that leads to a stack overflow and application crash. This is described as a different vulnerability from CVE-2006-5874 and CVE-2006-6406. The provi...