Debian Security Advisory DSA 776-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 776-1. Several bugs were discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified: CVE-2005-2450 Neel...

Debian Security Advisory DSA 824-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 824-1. Two vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified:...

ClamAV 'libclamav/pe.c' MEW压缩PE文件整数溢出漏洞

ClamAV是一款流行的反病毒应用程序。 Clam AntiVirus解析MEW压缩成的PE文件存在整数溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能导致任意代码执行。 在处理此PE文件时，两可不可信的值直接来自文件而没有任何检查，这些值之后用于算术运算来计算要分配的堆缓冲区，此计算可导致整数溢出，可能以应用程序进程权限执行任意指令。 Clam Anti-Virus ClamAV 0.91.2 升级程序： Clam Anti-Virus ClamAV 0.91.2 Clam Anti-Virus ClamAV 0.92...

openSUSE 10 Security Update : clamav (clamav-2391)

This update to ClamAV version 0.88.7 fixes various bugs : CVE-2006-5874: Clam AntiVirus ClamAV allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a NULL pointer dereference. CVE-2006-6481: Clam AntiVirus ClamAV 0.88.6 allowed...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is an open source GPL anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Nikolaos Rangos discovered a vulnerability in ClamAV which exists because the recipient address extracted from email messages is not properly sanitize...

[SECURITY] Fedora 7 Update: clamav-0.91.2-2.fc7

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

[SECURITY] [DSA 1366-1] New clamav packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1366-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 1st, 2007 http://www.debian.org/security/faq -...

[SECURITY] Fedora 7 Update: clamav-0.90.3-1.fc7

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Null pointer dereference

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

CVE-2007-3725

CVE-2007-3725 affects ClamAV and its RAR VM (unrarvm.c): running vulnerable builds prior to 0.91 can crash the scanner (denial of service) via a crafted RAR archive, caused by a NULL pointer dereference. Public references in the OpenVAS and vendor advisories indicate platforms such as SUSE (clama...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

[Full-disclosure] Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor - ------ Clam Antivirus http://www.clamav.net Product - ------- Clamav libclamav Versions Affected - ----------------- All before 0.91 Severity - -------- Moderate Issue - ----- Clamav crashes due to processing of standard filters in RAR VM,...

Re: [Full-disclosure] Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability.

Hi, The vulnerability also affects unrar 3.70 beta 3 freeware by Alexander Roshal, as it tries to read a negative location from a pointer reference in the SETVALUEfalse,Data,Addr-Offset function found in rarvm.cpp. The values of Addr is 1666528 while Offset is 4546004 which of course results in...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

Code injection

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...