clamav:clamav_scanfile_OLE2_fuzzer: Stack-buffer-overflow in initialize_encryption_key

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5200250925875200 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanfileOLE2fuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

SUSE CVE-2019-1788

A vulnerability in the Object Linking & Embedding OLE2 file scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of prope...

clamav:clamav_scanfile_OLE2_fuzzer: Crash in cli_ole2_extract

Detailed Report: https://oss-fuzz.com/testcase?key=6015788582830080 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfileOLE2fuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x620f80003d00 Crash State: cliole2extract cliscanole2...

clamav:clamav_scanfile_OLE2_fuzzer: Heap-double-free in cli_extract_xlm_macros_and_images

Detailed Report: https://oss-fuzz.com/testcase?key=5377513273032704 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanfileOLE2fuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x60300017fc00 Crash State: cliextractxlmmacrosandimages...

clamav:clamav_scanfile_OLE2_fuzzer: Heap-double-free in cli_extract_xlm_macros_and_images

Detailed Report: https://oss-fuzz.com/testcase?key=4967049879748608 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanfileOLE2fuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x602000007370 Crash State: cliextractxlmmacrosandimages...

SUSE SLES11 Security Update : clamav (SUSE-SU-2019:14015-1)

This update for clamav to version 0.100.3 fixes the following issues : Security issues fixed bsc1130721 : CVE-2019-1787: Fixed an out-of-bounds heap read condition which may occur when scanning PDF documents. CVE-2019-1789: Fixed an out-of-bounds heap read condition which may occur when scanning ...