CVE-2006-1989

Buffer overflow in the getdatabase function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers...

[SA19880] ClamAV Freshclam HTTP Header Buffer Overflow Vulnerability

TITLE: ClamAV Freshclam HTTP Header Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19880 VERIFY ADVISORY: http://secunia.com/advisories/19880/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/...

ClamAV Clam Anti Virus freshclam buffer overflow

Buffer overflow on oversized HTTP header...

clamav -- Freshclam HTTP Header Buffer Overflow Vulnerability

Secunia reports: A vulnerability has been reported in ClamAV, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a vulnerable system. The vulnerability is caused due to a boundary error within the HTTP client in the Freshclam command line...

SUSE-SA:2006:020: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:020 clamav. Clamav was updated to version 0.88.1 to fix the following security problems: - An integer overflow in the PE header parser CVE-2006-1614. - Format string bugs in the logging code could potentially be exploited to execu...

Multiple ClamAV Clam Antivirus security vulnerabilities

Integer overflow on PE files parsing, format string vulnerabilitry, unallocated memory access...

Mandrake Linux Security Advisory : clamav (MDKSA-2006:067)

Damian Put discovered an integer overflow in the PE header parser in ClamAV that could be exploited if the ArchiveMaxFileSize option was disabled CVE-2006-1614. Format strings in the logging code could possibly lead to the execution of arbitrary code CVE-2006-1615. David Luyer found that ClamAV...

GLSA-200604-06 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200604-06 ClamAV: Multiple vulnerabilities ClamAV contains format string vulnerabilities in the logging code CVE-2006-1615. Furthermore Damian Put discovered an integer overflow in ClamAV's PE header parser CVE-2006-1614 and David...

ClamAV: Multiple vulnerabilities

Background ClamAV is a GPL virus scanner. Description ClamAV contains format string vulnerabilities in the logging code CVE-2006-1615. Furthermore Damian Put discovered an integer overflow in ClamAV's PE header parser CVE-2006-1614 and David Luyer discovered that ClamAV can be tricked into...

CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1615

Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...

CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

DEBIAN-CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

DEBIAN-CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

DEBIAN-CVE-2006-1615

Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...

CVE-2006-1630

The CVE-2006-1630 issue affects ClamAV prior to version 0.88.1. The vulnerability is an invalid memory access within the cli_bitset_set() function in libclamav/others.c, which can allow a remote attacker to trigger a denial of service. A fix is available in 0.88.1 and later releases; upgrading to...

CVE-2006-1614

ClamAV is affected by CVE-2006-1614 (integer overflow in the PE header parser libclamav/pe.c when ArchiveMaxFileSize is disabled), potentially enabling DoS or arbitrary code execution. Related issues CVE-2006-1615 (format string vulnerabilities in logging) and CVE-2006-1630 (invalid memory access...

CVE-2006-1615

Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...

[SA19534] ClamAV Multiple Vulnerabilities

TITLE: ClamAV Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19534 VERIFY ADVISORY: http://secunia.com/advisories/19534/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: Some vulnerabilities...

Security fix for the ALT Linux 9 package clamav version 0.88.1-alt1

April 6, 2006 Victor Forsyuk 0.88.1-alt1 - 0.88.1 - Fixed CVE-2006-1614, CVE-2006-1615 and CVE-2006-1630. - Patches for clamav-milter from Sergey Y. Afonin...