4338 matches found
CVE-2008-1833
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...
CVE-2008-0314
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...
CVE-2008-0314
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...
CVE-2008-1833
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...
CVE-2008-1835: Improper Input Validation
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar...
CVE-2008-1836: Undefined Security Weakness
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read...
CVE-2008-0314: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...
CVE-2008-1837: Undefined Security Weakness
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats...
ClamAV antivirus multiple security vulnerabilities
Endless loop on ARJ files handling. Heap buffer overflow on WWPack'ed and PeSpin'ed PE files...
CVE-2008-1387: Undefined Security Weakness
ClamAV before 0.93 allows remote attackers to cause a denial of service CPU consumption via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats...
CVE-2008-1833: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...
ClamAV < 0.93.0 Multiple Overflows (deprecated)
Binary data 4465.prm...
Security fix for the ALT Linux 9 package clamav version 0.93-alt1
April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...
Security fix for the ALT Linux 10 package clamav version 0.93-alt1
April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...
Security fix for the ALT Linux 8 package clamav version 0.93-alt1
April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...
[Full-disclosure] clamav: Endless loop / hang with crafter arj, CVE-2008-1387
Advisory published at: http://int21.de/cve/CVE-2008-1387-clamav.html clamav: Endless loop / hang with crafter arj, CVE-2008-1387 References https://vulners.com/cve/CVE-2008-1387 http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog...
ClamAV libclamav/pe.c UPACK文件处理堆溢出漏洞
BUGTRAQ ID: 28756 CVECAN ID: CVE-2008-1100 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/pe.c文件中的cliscanpe函数在处理特制Upack可执行程序时存在堆溢出漏洞，如果杀毒软件检测到了恶意的Upack文件时就会触发这个溢出，导致执行任意指令。 ClamAV ClamAV 0.92.1 ClamAV ClamAV 0.92 ClamAV ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.clamav.net/...
clamav -- Multiple Vulnerabilities
Secunia reports: Some vulnerabilities have been reported in ClamAV, which can be exploited by malicious people to cause a DoS Denial of Service or to compromise a vulnerable system. 1 A boundary error exists within the "cliscanpe" function in libclamav/pe.c. This can be exploited to cause a...
