Gentoo Security Advisory GLSA 201009-06 (clamav)

The remote host is missing updates announced in advisory GLSA 201009-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 11 / 11.1 Security Update : clamav (SAT Patch Numbers 2479 / 2480)

This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - A off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 10 Security Update : clamav (ZYPP Patch Number 7056)

This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - An off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

openSUSE Security Update : clamav (openSUSE-SU-2010:0414-1)

This update fixes a off-by-one buffer overflow CVE-2010-1640 and a crash while parsing PDFs CVE-2010-1639, CVE-2010-2077 in clamav that can be used as a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

openSUSE Security Update : clamav (openSUSE-SU-2010:0414-1)

This update fixes a off-by-one buffer overflow CVE-2010-1640 and a crash while parsing PDFs CVE-2010-1639, CVE-2010-2077 in clamav that can be used as a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

CVE-2010-1640 is an off-by-one/read out-of-bounds vulnerability in ClamAV 0.96 (parseicon in libclamav/pe_icons.c) that can cause a remote denial of service via a crafted PE icon. Connected advisories and public feeds corroborate the issue as a remote DoS, tied to improper rounding during scaling...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1640. Reason: This candidate is a duplicate of CVE-2010-1640. Notes: All CVE users should reference CVE-2010-1640 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

ClamAV < 0.96.1 DoS Vulnerability - Linux

ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...