785 matches found
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...
DSA-1153 clamav - buffer overflow
Bulletin has no description...
FreeBSD : clamav -- heap overflow vulnerability (342d2e48-26db-11db-9275-000475abc56f)
"Clamav team reports : A heap overflow vulnerability was discovered in libclamav which could cause a denial of service or allow the execution of arbitrary code. The problem is specifically located in the PE file rebuild function used by the UPX unpacker. Relevant code from libclamav/upx.c :...
[Full-disclosure] [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow
Overflow.pl Security Advisory 6 Clam AntiVirus Win32-UPX Heap Overflow Vendor: Clam AntiVirus Affected version: Prior to 0.88.4 Vendor status: Fixed version released 0.88.4 Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/clamavupxheap.txt Date: 09.08.2006 1. Background "Clam...
ClamAV antivirus buffer overflow
Buffer overflow on parsing UPX-compressed PE files...
CVE-2006-4018
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...
CVE-2006-4018
CVE-2006-4018 is a heap-based buffer overflow in the UPX unpacker (libclamav/upx.c) of ClamAV 0.81–0.88.3, exploitable by a crafted UPX-packed file to potentially execute arbitrary code or cause a crash. Public references describe an unauthenticated remote attack via specially formed UPX files, a...
CVE-2006-4018
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...
ClamAV: Heap buffer overflow
Background ClamAV is a GPL virus scanner. Description Damian Put has discovered a boundary error in the pefromupx function used by the UPX extraction module, which unpacks PE Windows executable files. Both the "clamscan" command-line utility and the "clamd" daemon are affected. Impact By sending ...
Analysis of black anti-CD QQ black hand-vulnerability warning-the black bar safety net
Article author: 混世魔王 QQ: 2 6 8 3 6 6 5 9 Information source: evil octal information security team www.eviloctal.com） Note: this article has been published in the hacker defence magazine cheat money, master skip, there are deficiencies, but also look pointing. Look at the hack line of Defense for...
Clam Anti-Virus ClamAV 0.88.x - UPX Compressed PE File Heap Buffer Overflow
Clam Anti-Virus ClamAV 0.88.x - UPX Compressed PE File Heap Buffer Overflow source: https://www.securityfocus.com/bid/19381/info ClamAV is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory...
ClamAV < 0.88.4 UPX rsize Content-Parsing Overflow (deprecated)
Binary data 3701.prm...
Clam Anti-Virus ClamAV 0.88.x - UPX Compressed PE File Heap Buffer Overflow
source: https://www.securityfocus.com/bid/19381/info ClamAV is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. This issue occurs when the application attempts to handle compresse...
clamav -- heap overflow vulnerability
Clamav team reports: A heap overflow vulnerability was discovered in libclamav which could cause a denial of service or allow the execution of arbitrary code. The problem is specifically located in the PE file rebuild function used by the UPX unpacker. Relevant code from libclamav/upx.c: memcpyds...
[Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (not default configuration)
Overflow.pl Security Advisory 5 Clam AntiVirus Win32-UPX Heap Overflow not default configuration Vendor: Clam AntiVirus Affected version: Prior to 0.88.1 Vendor status: Fixed version released 0.88.1 Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/clamavupxinteger.txt Date:...
Mandrake Linux Security Advisory : clamav (MDKSA-2006:016)
A heap-based buffer overflow was discovered in ClamAV versions prior to 0.88 which allows remote attackers to cause a crash and possibly execute arbitrary code via specially crafted UPX files. This update provides ClamAV 0.88 which corrects this issue and also fixes some other bugs. %NASLMINLEVEL...
Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file
Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...
GLSA-200601-07 : ClamAV: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200601-07 ClamAV: Remote execution of arbitrary code Zero Day Initiative ZDI reported a heap buffer overflow vulnerability. The vulnerability is due to an incorrect boundary check of the user-supplied data prior to copying it to a...
ClamAV: Remote execution of arbitrary code
Background ClamAV is a GPL virus scanner. Description Zero Day Initiative ZDI reported a heap buffer overflow vulnerability. The vulnerability is due to an incorrect boundary check of the user-supplied data prior to copying it to an insufficiently sized memory buffer. The flaw occurs when the...
Clam AntiVirus UPX Unpacking Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable Clam AntiVirus installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within libclamav/upx.c during the unpacking of executable files compressed with UPX. Due to an...