728 matches found
CVE-2007-1745
The chmdecompressstream function in libclamav/chmunpack.c in Clam AntiVirus ClamAV before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third part...
CVE-2007-1997
Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...
CVE-2007-1997
CVE-2007-1997 describes an integer signedness error in libclamav/cab.c (cab_unstore and cab_extract) of ClamAV before 0.90.2, where a crafted CHM file containing a negative integer can pass a signed comparison and cause a stack-based buffer overflow, enabling remote code execution according to th...
CVE-2007-1745
CVE-2007-1745 affects ClamAV prior to 0.90.2, where the function chm_decompress_stream in libclamav/chmunpack.c leaks file descriptors when processing a crafted CHM file. The description from the initial document states the impact is unknown and does not specify a concrete exploit path or affecte...
CVE-2007-1745
The chmdecompressstream function in libclamav/chmunpack.c in Clam AntiVirus ClamAV before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third part...
[Full-disclosure] iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability
Clam AntiVirus ClamAV CAB File Unstore Buffer Overflow Vulnerability iDefense Security Advisory 04.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 16, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. ClamAV is often integrated into e-mail gateways and...
[SA24891] Clam AntiVirus Two Vulnerabilities
TITLE: Clam AntiVirus Two Vulnerabilities SECUNIA ADVISORY ID: SA24891 VERIFY ADVISORY: http://secunia.com/advisories/24891/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: Two vulnerabilities with...
ClamAV畸形CAB文件远程拒绝服务漏洞
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV处理畸形CAB文件时存在漏洞，远程攻击者可能利用此漏洞对ClamAV执行拒绝服务攻击。 ClamAV在处理CAB文件时，如果遇到记录长度为0的cabinet头，ClamAV就会在未关闭本地文件描述符的情况下便从函数返回。攻击者可以多次触发这个漏洞，最终导致用尽几乎所有可用的文件描述符，ClamAV无法扫描大多数文档，包括zip和tar文件，从而降低扫描服务的功能。 ClamAV 0.90RC1.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2007-0898
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...
CVE-2007-0897
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
CVE-2007-0898
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. dot dot in the id MIME header parameter in a multi-part message...
iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability
Multiple Vendor ClamAV CAB File Denial of Service Vulnerability iDefense Security Advisory 02.15.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 15, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. The main purpose of which is integration into electronic...
iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability
Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability iDefense Security Advisory 02.15.07 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 15, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. ClamAV is often integrated into mail gateways, and...
Clam AntiVirus嵌套MIME多部分内容拒绝服务漏洞
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 Clam AntiVirus在扫描嵌套了MIME多部分内容的消息时存在栈溢出。如果攻击者能够发送恶意邮件的话，就会导致Clam AntiVirus在扫描该邮件时拒绝服务。 ClamAV ClamAV 0.88.6 Gentoo已经为此发布了一个安全公告（GLSA-200612-18）以及相应补丁: GLSA-200612-18：ClamAV: Denial of Service 链接：http://security.gentoo.org/glsa/glsa-200612-18.xml...
DSA-1238-1 clamav
Bulletin has no description...
CVE-2006-6481
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to cause a denial of service stack overflow and application crash by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406...
CVE-2006-6481
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to cause a denial of service stack overflow and application crash by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406...
CVE-2006-6481
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to cause a denial of service stack overflow and application crash by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406...
Clam Anti-Virus MIME附件拒绝服务漏洞
Clam Anti-Virus是一款流行的反病毒程序。 Clam Anti-Virus处理畸形的BASE64编码MIME附件存在问题，远程攻击者利用漏洞对应用程序进行拒绝服务攻击。 提交特殊构建的BASE64编码的MIME附件诱使Clam Anti-Virus解析，可导致由于NULL指针引用而造成应用程序崩溃。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debia...