Debian DSA-1024-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the ClamAV anti-virus toolkit, which may lead to denial of service and potentially to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1614 Damian Put discovered ...

CVE-2006-4613

Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving 1 IPSec replay windows and 2 the use of vulnerable versions of ClamAV before 0.88.4. NOTE: it is possible that vector 2 is related to CVE-2006-4018...

PT-2006-5399 · Clamav +1 · Clamav +1

Name of the Vulnerable Software and Affected Versions: SnapGear versions prior to 3.1.4u1 ClamAV versions prior to 0.88.4 Description: The issue involves multiple unspecified vulnerabilities that can be exploited by remote attackers to cause a denial of service. This is achieved through unspecifi...

CVE-2006-4613

Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving 1 IPSec replay windows and 2 the use of vulnerable versions of ClamAV before 0.88.4. NOTE: it is possible that vector 2 is related to CVE-2006-4018...

CVE-2006-4613

CVE-2006-4613 affects SnapGear before 3.1.4u1, with denial-of-service via IPSec replay window and via vulnerable ClamAV before 0.88.4; the latter (CVE-2006-4018) is a UPX-handling heap overflow in ClamAV that can crash the scanner or allow remote code execution. Some sources note vector 2 may be ...

[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...

DSA-1153 clamav - buffer overflow

Bulletin has no description...

FreeBSD : clamav -- heap overflow vulnerability (342d2e48-26db-11db-9275-000475abc56f)

"Clamav team reports : A heap overflow vulnerability was discovered in libclamav which could cause a denial of service or allow the execution of arbitrary code. The problem is specifically located in the PE file rebuild function used by the UPX unpacker. Relevant code from libclamav/upx.c :...

Security fix for the ALT Linux 9 package clamav version 0.88.4-alt1

Aug. 10, 2006 Victor Forsyuk 0.88.4-alt1 - 0.88.4, fixed CVE-2006-4018...

GLSA-200608-13 : ClamAV: Heap buffer overflow

The remote host is affected by the vulnerability described in GLSA-200608-13 ClamAV: Heap buffer overflow Damian Put has discovered a boundary error in the pefromupx function used by the UPX extraction module, which unpacks PE Windows executable files. Both the 'clamscan' command-line utility and...

Security fix for the ALT Linux 8 package clamav version 0.88.4-alt1

Aug. 10, 2006 Victor Forsyuk 0.88.4-alt1 - 0.88.4, fixed CVE-2006-4018...

Security fix for the ALT Linux 10 package clamav version 0.88.4-alt1

Aug. 10, 2006 Victor Forsyuk 0.88.4-alt1 - 0.88.4, fixed CVE-2006-4018...

ClamAV antivirus buffer overflow

Buffer overflow on parsing UPX-compressed PE files...

CVE-2006-4018

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...

CVE-2006-4018

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...

DEBIAN-CVE-2006-4018

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...

CVE-2006-4018

CVE-2006-4018 is a heap-based buffer overflow in the UPX unpacker (libclamav/upx.c) of ClamAV 0.81–0.88.3, exploitable by a crafted UPX-packed file to potentially execute arbitrary code or cause a crash. Public references describe an unauthenticated remote attack via specially formed UPX files, a...

CVE-2006-4018

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...

ClamAV: Heap buffer overflow

Background ClamAV is a GPL virus scanner. Description Damian Put has discovered a boundary error in the pefromupx function used by the UPX extraction module, which unpacks PE Windows executable files. Both the "clamscan" command-line utility and the "clamd" daemon are affected. Impact By sending ...

clamav -- heap overflow vulnerability

Clamav team reports: A heap overflow vulnerability was discovered in libclamav which could cause a denial of service or allow the execution of arbitrary code. The problem is specifically located in the PE file rebuild function used by the UPX unpacker. Relevant code from libclamav/upx.c: memcpyds...