CVE-2008-1837

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats...

CVE-2008-1836

CVE-2008-1836 affects ClamAV (libclamav) prior to version 0.93. The vulnerability arises in the rfc2231 handling in message.c, where crafting a message can produce a non-null-terminated string and trigger a buffer over-read, potentially impacting availability via a crash. Connected security entri...

CVE-2008-1837

CVE-2008-1837 affects ClamAV (libclamunrar) prior to 0.93. The vulnerability allows remote attackers to crash the scanner by providing crafted RAR files that trigger memory problems, as demonstrated by the PROTOS GENOME test suite for Archive Formats. The issue is addressed in ClamAV 0.93 and rel...

CVE-2008-1835

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar...

CVE-2008-1387

CVE-2008-1387 affects ClamAV up to version 0.93, where a crafted ARJ archive can cause CPU-based denial of service. Public sources in the connected data corroborate that ClamAV prior to 0.93 was susceptible, and advisories (e.g., Mandriva MDVSA-2008:088) describe the vulnerability as fixed in the...

CVE-2008-1835

CVE-2008-1835 affects ClamAV up to version 0.93. The issue allows remote attackers to bypass the scanning engine by supplying a RAR file with an invalid version number that ClamAV cannot parse but can be extracted by WinRAR. The vulnerability is documented across multiple advisories (Mandriva, SU...

CVE-2008-1387

ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...

CVE-2008-1836

The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

DEBIAN-CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

DEBIAN-CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2008-1833

CVE-2008-1833 describes a heap-based buffer overflow in pe.c of libclamav (ClamAV 0.92.1) that could allow a remote attacker to execute arbitrary code by feeding a crafted WWPack-packed PE binary. Connected advisories document affected products (ClamAV 0.92.x lineage) and indicate a fix in the 0....

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-0314

CVE-2008-0314 is discussed in the Mandriva advisory MDVSA-2008:088 as a heap-based buffer overflow in ClamAV 0.92.1’s libclamav (spin.c) that allows remote execution via a crafted PeSpin packed PE binary. The issue is mitigated by upgrading to the newer ClamAV release (0.93+), which addresses thi...

CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...