728 matches found
CVE-2006-6406
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...
CVE-2006-6406
Clam AntiVirus ClamAV 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...
CVE-2006-6406
CVE-2006-6406 affects ClamAV up to version 0.88.6, allowing remote attackers to bypass virus detection by inserting invalid characters into base64 content in a multipart/mixed MIME file (as demonstrated with the EICAR test file). Connected documents corroborate this CVE and relate it to related i...
clamav -- Multipart Nestings Denial of Service
Secunia reports: Clam AntiVirus have a vulnerability, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to a stack overflow when scanning messages with deeply nested multipart content. This can be exploited to crash the service by sending...
Clam AntiVirus fails to properly handle crafted Portable Executable (PE) files
Overview A vulnerability in the way Clam AntiVirus processes Portable Executable PE files may lead to execution of arbitrary code. Description Clam AntiVirus is a GPL virus scanner that has built-in support for for a number of file types including PE. According to iDefense Public Advisory:...
Clam AntiVirus处理UPX压缩PE文件构建堆溢出漏洞
Clam AntiVirus是一款UNIX环境下开源的防病毒软件。 Clam AntiVirus在处理畸形UPX压缩的文件时存在堆溢出漏洞，远程攻击者可能利用此漏洞完全控制查毒机器。 Clam AntiVirus的pefromupx函数在处理UPX格式压缩的文件构建PE文件时存在堆溢出问题，远程攻击者可能通过恶意的UPX文件在查毒机器上执行任意指令。 ClamAV ClamAV 0.88.3 ClamAV ClamAV 0.88.2 目前厂商已经在0.88.4及以上版本的软件中修补了这个安全问题，请到厂商的主页下载： http://www.clamav.net/...
Clam Anti-Virus PE文件头处理堆溢出漏洞
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 Clam AV在处理畸形PE文件时存在堆溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令 。 在处理某些PE格式文件时，两个变量可能会被恶意地设置为非常大的值，导致整数溢出。这可能导致分配比预期少的内存，之后的代码可能会覆盖堆缓冲区。 ClamAV ClamAV 0.88.4 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1196-1）以及相应补丁: DSA-1196-1：New clamav packages fix arbitrary code...
Clam Anti-Virus CHM解包器拒绝服务漏洞
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV在处理CHM文件的解包时存在安全漏洞，远程攻击者可能利用此漏洞导致ClamAV崩溃。 在处理畸形文件时，ClamAV chmunpack.c中的代码可能试图读取无效的内存位置，导致扫描服务异常终止。 ClamAV ClamAV 0.88.4 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1196-1）以及相应补丁: DSA-1196-1：New clamav packages fix arbitrary code execution...
Clam AntiVirus <= 0.88.4 (rebuildpe) Remote Heap Overflow PoC
No description provided by source. Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl http://www.milw0rm.com/sploits/10172006-clampetiteheap.exe.bz2...
Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC
No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...
FreeBSD : clamav -- CHM unpacker and PE rebuilding vulnerabilities (8012a79d-5d21-11db-bb8d-00123ffe8333)
Secunia reports : Two vulnerabilities have been reported in Clam AntiVirus, which potentially can be exploited by malicious people to cause a DoS Denial of Service or compromise a vulnerable system. 1 An unspecified error in the CHM unpacker in chmunpack.c can be exploited to cause a DoS. 2 An...
Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability
Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability iDefense Security Advisory 10.15.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 15, 2006 I. BACKGROUND Clam AntiVirus is a multi-platform GPL anti-virus toolkit. The main purpose of which is integration into electronic ma...
Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)
Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service PoC !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...
Clam AntiVirus 0.88.4 - 'rebuildpe' Remote Heap Overflow (PoC)
Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2587.exe.bz2 10172006-clampetiteheap.exe.bz2 milw0rm.com 2006-10-17...
Clam AntiVirus 0.88.4 - rebuildpe Remote Heap Overflow (PoC)
Clam AntiVirus 0.88.4 - rebuildpe Remote Heap Overflow PoC Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2587.exe.bz2...
Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC
Exploit for multiple platform in category dos / poc ====================================================== Clam AntiVirus = 0.88.4 CHM Chunk Name Length DoS PoC ====================================================== !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took...
Clam AntiVirus <= 0.88.4 (rebuildpe) Remote Heap Overflow PoC
Exploit for multiple platform in category dos / poc ============================================================= Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC ============================================================= http://www.inj3ct0r.com/sploits/6210.exe.bz2 0day.today...
Clam AntiVirus <= 0.88.4 (rebuildpe) Remote Heap Overflow PoC
No description provided by source. Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl http://www.milw0rm.com/sploits/10172006-clampetiteheap.exe.bz2 milw0rm.com 2006-10-17...
Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)
!/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...
[SA22370] Clam AntiVirus CHM Unpacker and PE Rebuilding Vulnerabilities
TITLE: Clam AntiVirus CHM Unpacker and PE Rebuilding Vulnerabilities SECUNIA ADVISORY ID: SA22370 VERIFY ADVISORY: http://secunia.com/advisories/22370/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/...