CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2005-1922

ClamAV (clamav) before 0.86 is affected by an MS-Expand file handling vulnerability in cli_msexpand. A crafted file can cause repeated errors, leading to denial of service via resource exhaustion (file descriptors and memory). Affected product/version: ClamAV prior to 0.86. Remedy: upgrade to 0.8...

CVE-2005-1923

CVE-2005-1923 affects ClamAV up to 0.85/0.83 (affected: ClamAV 0.83 and other versions before 0.86). The vulnerability is in the ENSURE_BITS macro used in mszipd.c, where a CAB file with cffile_FolderOffset = 0xff can cause a zero-length read, leading to an infinite loop and high CPU usage (remot...

CVE-2005-1922

The MS-Expand file handling in Clam AntiVirus ClamAV before 0.86 allows remote attackers to cause a denial of service file descriptor and memory consumption via a crafted file that causes repeated errors in the climsexpand function...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

Multiple ClamAV antivirus DoS vulnerabilities

Descriptors leak on MS-Expand and CAB files...

CVE-2005-2070

The ClamAV Mail fILTER clamav-milter 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading...

CVE-2005-2056

The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...

CVE-2005-2070

CVE-2005-2070 affects the ClamAV Mail fILTER (clamav-milter) when used with Sendmail and long timeouts. Affected versions: 0.84–0.85d; vulnerability allows remote attackers to cause a denial of service by keeping an open connection, preventing ClamAV from reloading. Debian/DSA-737-1 recommendatio...

CVE-2005-2070

The ClamAV Mail fILTER clamav-milter 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading...

CVE-2005-2070

The ClamAV Mail fILTER clamav-milter 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading...

CVE-2005-2070

The ClamAV Mail fILTER clamav-milter 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading...

CVE-2005-2070

The ClamAV Mail fILTER clamav-milter 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading...

clamav -- cabinet file handling DoS vulnerability

An iDEFENSE Security Advisory reports: Remote exploitation of an input validation error in Clam AntiVirus ClamAV allows attackers to cause a denial of service condition. The vulnerability specifically exists due to insufficient validation on cabinet file header data. The ENSUREBITS macro fails to...

clamav -- MS-Expand file handling DoS vulnerability

An iDEFENSE Security Advisory reports: Remote exploitation of an input validation error in Clam AntiVirus ClamAV allows attackers to cause a denial of service condition. The vulnerability specifically exists due to improper behavior during exceptional conditions. Successful exploitation allows...

ClamAV < 0.86.1 Content-parsing DoS (deprecated)

Binary data 3033.prm...

[SA15811] ClamAV Quantum Decompressor Denial of Service Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

ClamAV antivirus Qantum compression DoS

Compression with small windows size causes anti virus to crash...

long sendmail timeouts let attacker prevent milter quiesce

Summary: An attacker that can predict when a milter will need to quiesce input to allow for a reload may hold open an SMTP session for several hours. This will lead to a DoS condition on the mailserver. Background: Sendmail is a popular Mail Transfer Agent MTA, used in many large sites that requi...

CVE-2005-1795

The vulnerability affects Clam AntiVirus (ClamAV) prior to 0.85 on macOS, where the filecopy function in misc.c can be exploited by a virus name containing shell metacharacters. This occurs when HFS permissions prevent deletion and ditto is invoked, allowing remote code execution. The reported im...