CVE-2006-1615

CVE-2006-1615 refers to ClamAV (prior to 0.88.1) format-string vulnerabilities in the logging code that may allow remote attackers to execute arbitrary code. Public sources (Debian DSA-1024-1, OpenVAS entries) describe this format-string issue as potentially enabling code execution, with remote i...

CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file

Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...

[Full-disclosure] ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability

ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-001.html January 12, 2006 -- CVE ID: CVE-2006-0162 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87.1 -- TippingPointTM IPS Customer...

Clam AntiVirus UPX Unpacking Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable Clam AntiVirus installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within libclamav/upx.c during the unpacking of executable files compressed with UPX. Due to an...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

Heap overflow

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

CVE-2006-0162 corresponds to a heap-based buffer overflow in libclamav/upx.c of ClamAV (pre-0.88) that can be triggered by crafted UPX files, potentially causing a crash or arbitrary code execution via remote attack. The OpenVAS/ advisory corpus confirms this issue across multiple distributions (...

clamav -- possible heap overflow in the UPX code

The Zero Day Initiative reports: This vulnerability allows remote attackers to execute arbitrary code on vulnerable Clam AntiVirus installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within libclamav/upx.c during the unpacking of executable files...

CVE-2005-3587

Improper boundary checks in petite.c in Clam AntiVirus ClamAV before 0.87.1 allows attackers to perform unknown attacks via unknown vectors...

CVE-2005-3587

CVE-2005-3587 affects ClamAV up to version 0.87.1. The issue is an improper boundary check in petite.c that could allow attackers to perform unknown attacks via unknown vectors. Public mentions anchor the vulnerability in advisories (Mandrake MDKSA-2005:205; GLSA-200511-04) and the OSV/DEBIAN/NVD...

CVE-2005-3587

Improper boundary checks in petite.c in Clam AntiVirus ClamAV before 0.87.1 allows attackers to perform unknown attacks via unknown vectors...

CVE-2005-3587

Improper boundary checks in petite.c in Clam AntiVirus ClamAV before 0.87.1 allows attackers to perform unknown attacks via unknown vectors...

DSA-887-1 clamav - several

Bulletin has no description...

DEBIAN-CVE-2005-3501

The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...

CVE-2005-3303

The FSG unpacker fsg.c in Clam AntiVirus ClamAV 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file...

CVE-2005-3501

The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...