173 matches found
The vulnerability of the `index_local_file_headers_within_bounds()` function in the `libclamav/unzip.c` file of the ClamAV antivirus program allows a hacker to execute arbitrary code and cause service failure.
The vulnerability of the indexlocalfileheaderswithinbounds function in the libclamav/unzip.c file of the ClamAV antivirus program is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failures...
The vulnerability of the index_local_file_headers() function in the libclamav/unzip.c file of the ClamAV antivirus program allows a hacker to cause a service failure.
The vulnerability of the indexlocalfileheaders function in the libclamav/unzip.c file of the ClamAV antivirus program is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2005-2451
Malware in sbrugna...
EUVD-2007-0895
Malware in sbrugna...
EUVD-2013-6874
Malware in sbrugna...
Debian: Security Advisory (DLA-437-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-95-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2006-1630
The clibitsetset function in libclamav/others.c in Clam AntiVirus ClamAV before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."...
SUSE CVE-2007-0899
There is a possible heap overflow in libclamav/fsg.c before 0.100.0...
SUSE CVE-2007-6335
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...
SUSE CVE-2008-0728
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."...
SUSE CVE-2008-1833
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...
SUSE CVE-2008-1836
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read...
SUSE CVE-2008-3912
libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...
SUSE CVE-2010-3434
Buffer overflow in the findstreambounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party informatio...
SUSE CVE-2010-4479
Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka "bb 2380," a different vulnerability than CVE-2010-4260...
SUSE CVE-2011-1003
Double free vulnerability in the vbareadprojectstrings function in vbaextract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications VBA data in a Microsoft Office document. NOTE: some of these details are obtained fro...
SUSE CVE-2011-2721
Off-by-one error in the clihmscan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service daemon crash via an e-mail message that is not properly handled during certain hash calculations...
