CVE-2006-6406

Clam AntiVirus ClamAV 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

DEBIAN-CVE-2006-5874

Clam AntiVirus ClamAV 0.88 and earlier allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a null pointer dereference...

DEBIAN-CVE-2006-6406

Clam AntiVirus ClamAV 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

CVE-2006-5874

Clam AntiVirus ClamAV 0.88 and earlier allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a null pointer dereference...

CVE-2006-5874

The CVE-2006-5874 entry concerns ClamAV

CVE-2006-6406

Clam AntiVirus ClamAV 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

CVE-2006-6406

CVE-2006-6406 affects ClamAV up to version 0.88.6, allowing remote attackers to bypass virus detection by inserting invalid characters into base64 content in a multipart/mixed MIME file (as demonstrated with the EICAR test file). Connected documents corroborate this CVE and relate it to related i...

CVE-2006-5874

Clam AntiVirus ClamAV 0.88 and earlier allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a null pointer dereference...

CVE-2006-6406

Clam AntiVirus ClamAV 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

[SECURITY] [DSA 1232-1] New clamav packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1232-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 9th, 2006 http://www.debian.org/security/faq -...

ClamAV antivirus DoS

High recursion of MIME parts causes antivirus to crash...

[SECURITY] [DSA 1232-1] New clamav packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1232-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 9th, 2006 http://www.debian.org/security/faq -...

DSA-1232-1 clamav

Bulletin has no description...

Multiple Vendor Unusual MIME Encoding Content Filter Bypass

Several e-mail virus scanners can be tricked into passing an EICAR test file if the following conditions are met: 1. the EICAR file is encoded in Base64 including characters not in the standard alphabet e.g. whitespaces and 2. the part containing the EICAR file is nested within one or several...

Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass

On Thu, 7 Dec 2006 22:00:31 +0300 3APA3A [email protected] wrote: Dear Tomasz Kojm, TK That's extremely irresponsible to disclose bugs without giving the TK vendors any chance to fix them and prepare new software releases. This is a rare case I can not agree with such statement. Ability to...

ClamAV < 0.88.7 MIME-encoded Scan Bypass (deprecated)

Binary data 3842.prm...

Debian DSA-1196-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the ClamAV malware scan engine, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4182 Damian Put discovered a heap overflow error in the script ...

GLSA-200610-10 : ClamAV: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200610-10 ClamAV: Multiple Vulnerabilities Damian Put and an anonymous researcher reported a potential heap-based buffer overflow vulnerability in rebuildpe.c responsible for the rebuilding of an unpacked PE file, and a possible...

ClamAV: Multiple Vulnerabilities

Background ClamAV is a GPL virus scanner. Description Damian Put and an anonymous researcher reported a potential heap-based buffer overflow vulnerability in rebuildpe.c responsible for the rebuilding of an unpacked PE file, and a possible crash in chmunpack.c in the CHM unpacker. Impact By sendi...

[SECURITY] [DSA 1196-1] New clamav packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1196-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 19th, 2006 http://www.debian.org/security/faq -...