CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1615

Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...

CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2006-1615

CVE-2006-1615 refers to ClamAV (prior to 0.88.1) format-string vulnerabilities in the logging code that may allow remote attackers to execute arbitrary code. Public sources (Debian DSA-1024-1, OpenVAS entries) describe this format-string issue as potentially enabling code execution, with remote i...

CVE-2006-1615

Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...

CVE-2006-1630

The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...

CVE-2006-1614

ClamAV is affected by CVE-2006-1614 (integer overflow in the PE header parser libclamav/pe.c when ArchiveMaxFileSize is disabled), potentially enabling DoS or arbitrary code execution. Related issues CVE-2006-1615 (format string vulnerabilities in logging) and CVE-2006-1630 (invalid memory access...

CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file

Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...

[Full-disclosure] ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability

ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-001.html January 12, 2006 -- CVE ID: CVE-2006-0162 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87.1 -- TippingPointTM IPS Customer...

Clam AntiVirus UPX Unpacking Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable Clam AntiVirus installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within libclamav/upx.c during the unpacking of executable files compressed with UPX. Due to an...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

Heap overflow

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus ClamAV before 0.88 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted UPX files...

CVE-2006-0162

CVE-2006-0162 corresponds to a heap-based buffer overflow in libclamav/upx.c of ClamAV (pre-0.88) that can be triggered by crafted UPX files, potentially causing a crash or arbitrary code execution via remote attack. The OpenVAS/ advisory corpus confirms this issue across multiple distributions (...

clamav -- possible heap overflow in the UPX code

The Zero Day Initiative reports: This vulnerability allows remote attackers to execute arbitrary code on vulnerable Clam AntiVirus installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within libclamav/upx.c during the unpacking of executable files...

CVE-2005-3587

Improper boundary checks in petite.c in Clam AntiVirus ClamAV before 0.87.1 allows attackers to perform unknown attacks via unknown vectors...

CVE-2005-3587

CVE-2005-3587 affects ClamAV up to version 0.87.1. The issue is an improper boundary check in petite.c that could allow attackers to perform unknown attacks via unknown vectors. Public mentions anchor the vulnerability in advisories (Mandrake MDKSA-2005:205; GLSA-200511-04) and the OSV/DEBIAN/NVD...