575 matches found
Mandrake Linux Security Advisory : clamav (MDKSA-2007:098)
iDefense discovered a stack-based overflow in ClamAV when processing negative values in .cab files. As well, multiple file descriptor leaks were also reported and fixed in chmunpack.c, pdf.c, and dblock.c. This update provides ClamAV 0.90.2 which corrects these problems and provides new...
GLSA-200704-21 : ClamAV: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200704-21 ClamAV: Multiple vulnerabilities iDefense Labs have reported a stack-based buffer overflow in the cabunstore function when processing negative values in .cab files. Multiple file descriptor leaks have also been reported ...
Debian DSA-1281-1 : clamav - several vulnerabilities
Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1745 It was discovered that a file descriptor leak in the CHM handler may lead to denial of service. - CVE-2007-1997 ...
DEBIAN-CVE-2007-1997
Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...
DSA-1263-1 clamav
Bulletin has no description...
GLSA-200703-03 : ClamAV: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200703-03 ClamAV: Denial of Service An anonymous researcher discovered a file descriptor leak error in the processing of CAB archives and a lack of validation of the 'id' parameter string used to create local files when parsing MI...
CVE-2007-0897
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
CVE-2007-0897
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
ClamAV antivirus directory traversal
MIME part id is used to form local filename without checking for ../. In addition, there is a DoS on CAB files parsing...
CVE-2006-6960
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...
CVE-2006-6960
The CVE concerns WebRoot Spy Sweeper (Compression Sweep) prior to version 4.5.9 failing to handle non-ZIP archives. Specifically, the feature does not process archives in RAR, GZ, TAR, CAB, or ACE formats, which can allow remote attackers to bypass malware detection. Affected component: Compressi...
NOD32 Anti-Virus CAB文件解析引擎整数溢出漏洞
NOD32 Anti-Virus是一款流行的反病毒软件。 NOD32 Anti-Virus处理CAB文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 特殊构建的.CAB文件，当NOD32 Anti-Virus解析时可导致整数溢出而以应用程序进程权限执行任意指令。 Eset Software NOD32 Antivirus 可参考如下安全公告获得补丁信息： http://eset.com/support/updates.php?pageno=63...
[Full-disclosure] NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory
n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.005 21-Dec-2006 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2006/08/24 initial notification of ESET 2006/08/28 ESET Respon...
ESET NOD32 antivirus multiple security vulnerabilities
Buffer overflow on .DOC documents and .CAB archives parsing, DoS on CHM files parsing...
NOD32 Antivirus < 1.1743 Multiple File Processing Vulnerabilities
The version of NOD32 installed on the remote host reportedly has a heap overflows involving processing of '.doc' and '.cab' files and a divide-by-zero flaw involving '.chm' files. A remote attacker may be able to leverage the first flaw to execute code remotely or crash the affected service. C...
CVE-2006-5937
CVE-2006-5937 relates to multiple integer overflows in Grisoft AVG Anti-Virus prior to 7.1.407. The vulnerability allows remote attackers to execute arbitrary code by supplying crafted CAB or RAR archives that trigger a heap-based buffer overflow. Publicly included references note this involves r...
CVE-2006-5938
Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB file...
CVE-2006-5937
Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted 1 CAB or 2 RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information...
AVG Anti-Virus多个远程代码执行漏洞
AVG Anti-Virus是一款功能完备的杀毒软件。 AVG Anti-Virus的文件解析引擎存在多个漏洞，目前已确定的漏洞包括： - 解析.CAB文件时的整数溢出可能导致堆溢出； - 解析.CAB文件时未初始化变量； - 解析.DOC文件时会分隔为0； - 解析.RAR文件时的整数溢出可能导致堆溢出； - 解析.EXE文件时存在整数问题。 如果攻击者创建了特制文件的话，这些漏洞就可能导致远程执行任意代码。 Grisoft AVG Anti-Virus 7.1.407 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...