CVE-2005-1711

Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected...

CVE-2004-1909

The CVE-2004-1909 instance concerns ClamAV (0.68 and earlier) where processing certain RAR archives, such as those created by Beagle/Bagle variants, can crash the clamav process leading to a denial of service. Public references in Gentoo GLSA-200404-07 confirm the remote impact vector (RAR archiv...

CVE-2004-1909

Claim Anti-Virus ClamAV 0.68 and earlier allows remote attackers to cause a denial of service crash via certain RAR archives, such as those generated by the Beagle/Bagle worm...

CVE-2004-1876

The CVE-2004-1876 issue affects ClamAV's clamd (VirusEvent directive) prior to version 0.70. The vulnerability arises from using the "%f" parameter to substitute the file name, allowing a local user to trigger shell metacharacters and execute arbitrary commands with privileges of the antivirus pr...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

DEBIAN-CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

DEBIAN-CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

GLSA-200501-46 : ClamAV: Multiple issues

The remote host is affected by the vulnerability described in GLSA-200501-46 ClamAV: Multiple issues ClamAV fails to properly scan ZIP files with special headers CAN-2005-0133 and base64 encoded images in URLs. Impact : By sending a base64 encoded image file in a URL an attacker could evade virus...

CVE-2005-0133

CVE-2005-0133 concerns ClamAV 0.80 and earlier, where the clamd daemon can crash (DoS) by processing a ZIP with malformed headers. The OpenVAS/Gentoo/Ubuntu entries confirm the issue affects ClamAV and describe a DoS via crafted ZIPs. Remediation in the connected docs is to upgrade to a newer Cla...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0218

CVE-2005-0218 : ClamAV versions up to 0.80 are vulnerable. A remote attacker can bypass virus scanning by embedding a base64-encoded image in a data: URL, allowing malicious content to pass checks. The issue is documented across multiple advisories, indicating a vulnerability in the data: URL han...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

Mandrake Linux Security Advisory : clamav (MDKSA-2005:025)

Two problems were discovered in versions of clamav prior to 0.81. An attacker could evade virus scanning by sending a base64-encoded imaege file in a URL. Also, by sending a specially crafted ZIP file, an attacker could cause a DoS Denial of Service by crashing the clamd daemon. %NASLMINLEVEL 703...