GLSA-200809-18 : ClamAV: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200809-18 ClamAV: Multiple Denials of Service Hanno boeck reported an error in libclamav/chmunpack.c when processing CHM files CVE-2008-1389. Other unspecified vulnerabilities were also reported, including a NULL pointer dereferen...

FreeBSD Ports: clamav

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : clamav -- CHM Processing Denial of Service (da5c4072-8082-11dd-9c8c-001c2514716c)

Hanno Boeck reports : A fuzzing test showed weakness in the chm parser of clamav, which can possibly be exploited. The clamav team has disabled the chm module in older versions though freshclam updates and has released 0.94 with a fixed parser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

clamav: Crash with crafted chm, CVE-2008-1389

clamav: Crash with crafted chm, CVE-2008-1389 References https://vulners.com/cve/CVE-2008-1389 http://int21.de/cve/CVE-2008-1389-clamav-chd.html http://www.int21.de/cve/cve-2008-1389-samples.tar.bz2 https://wwws.clamav.net/bugzilla/showbug.cgi?id=1089 Description A fuzzing test showed weakness in...

ClamAV antivirus CHM files DoS

No description provided...

ClamAV Invalid Memory Access Denial Of Service Vulnerability

The host is running Clam AntiVirus, which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodclamavinvalidmemaccessdosvuln900117.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: ClamAV Invalid Memory Access Denial Of Service Vulnerability Authors: Sharath S...

ClamAV < 0.94 Invalid Memory Access DoS Vulnerability

ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...

CVE-2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...

CVE-2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...

Design/Logic Flaw

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...

CVE-2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...

CVE-2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...

CVE-2008-1389

CVE-2008-1389 affects ClamAV’s CHM parser (libclamav/chmunpack.c). A malformed CHM file can trigger an invalid memory access, leading to an application crash (denial of service) in ClamAV before version 0.94. Connected advisory data confirm that this vulnerability was addressed by the vendor with...

CVE-2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...

F-PROT Antivirus Multiple Vulnerabilities

The remote host is installed with F-PROT Antivirus, which is prone multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodf-protavmultvuln900018.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: F-PROT Antivirus Multiple Vulnerabilities Authors: Chandan S Copyright:...

CVE-2008-3244

The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of service engine crash via a CHM file with a large nbdir value that triggers an out-of-bounds read...

F-PROT Antivirus Engine < 4.4.4 Multiple File Handling DoS Vulnerabilities

The version of F-PROT Anti-Virus installed on the remote Windows host contains flaws in the way it handles CHM, UPX-compressed, ASPack-compressed and certain Microsoft office files. - A malformed CHM file containing '0xffffffff' in the 'nbdir' field could crash the application. - A malformed...

F-Prot antivirus DoS

Out-of-bound memory access on CHM files parsing...

[SECURITY] Fedora 8 Update: chmsee-1.0.0-3.31.fc8

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

F-PROT杀毒软件CHM文件处理拒绝服务漏洞

BUGTRAQ ID: 30258 F-Prot Antivirus是一款UNIX平台上的杀毒软件。 F-Prot杀毒引擎在解析CHM文件头时存在拒绝服务漏洞，如果文件头的nbdir字段（根索引块的块数）值被设置为0xffffffff的话，指针计算就可能出现越界读取，导致拒绝服务的情况。 F-Prot Antivirus 4.4.4 F-Prot ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-prot.com/...