CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

CVE-2007-2650

CVE-2007-2650 affects ClamAV’s OLE2 parser. A crafted OLE2/DOC can trigger DoS via (1) large property size or (2) an infinite loop in the FAT file block chain, as documented. Connected advisories note ClamAV updates/resolutions to mitigate this issue (example: Debian security advisory DSA 1320-1 ...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

KLA10118 DoS vulnerability in Clam Anti-virus

An unspecified vulnerability was found in Clam Anti-virus. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the OLE2 parser via a specially designed file.. Original advisories Message with vulnerability...

Design/Logic Flaw

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

DEBIAN-CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

Design/Logic Flaw

The chmdecompressstream function in libclamav/chmunpack.c in Clam AntiVirus ClamAV before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third part...

CVE-2007-1745

The chmdecompressstream function in libclamav/chmunpack.c in Clam AntiVirus ClamAV before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third part...

CVE-2007-1997

Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...

CVE-2007-1997

CVE-2007-1997 describes an integer signedness error in libclamav/cab.c (cab_unstore and cab_extract) of ClamAV before 0.90.2, where a crafted CHM file containing a negative integer can pass a signed comparison and cause a stack-based buffer overflow, enabling remote code execution according to th...

CVE-2007-1745

CVE-2007-1745 affects ClamAV prior to 0.90.2, where the function chm_decompress_stream in libclamav/chmunpack.c leaks file descriptors when processing a crafted CHM file. The description from the initial document states the impact is unknown and does not specify a concrete exploit path or affecte...

CVE-2007-1745

The chmdecompressstream function in libclamav/chmunpack.c in Clam AntiVirus ClamAV before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third part...

[Full-disclosure] iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability

Clam AntiVirus ClamAV CAB File Unstore Buffer Overflow Vulnerability iDefense Security Advisory 04.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 16, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. ClamAV is often integrated into e-mail gateways and...