CVE-2008-5050

Off-by-one error in the getunicodename function libclamav/vbaextract.c in Clam Anti-Virus ClamAV before 0.94.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow...

openSUSE 10 Security Update : claws-mail (claws-mail-5611)

clamav has been updated due to security problems. The version number of the clamav library has been changed with that update. Therefore programs like claws-mail that are linked against libclamav need to be updated as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2008-3912

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

DEBIAN-CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...

CVE-2008-3912

CVE-2008-3912 affects ClamAV’s libclamav in versions before 0.94, causing a denial of service via an out-of-memory condition that can trigger a NULL pointer dereference and application crash. Connected advisories align on this being a memory-related vulnerability in the CLAMAV 0.94 series; open-s...

CVE-2008-3912

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an out-of-memory condition...

Design/Logic Flaw

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service application crash via a malformed CHM file, related to an "invalid memory access."...

Out-of-bounds

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

ClamAV libclamav库PeSpin堆溢出漏洞

BUGTRAQ ID: 28784 CVECAN ID: CVE-2008-0314 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV中负责解压用PeSpin加密所包装的PE库的代码存在堆溢出漏洞，攻击者可能通过诱使用户处理畸形文件控制用户系统。 以下为libclamav/spin.c中的有漏洞代码段： 417 key32 = clireadint32ep+0x2fee; ... 427 clidbgmsg"spin: Resources sect%d appear to be compressed\n\tuncompressed...

CVE-2008-1836

CVE-2008-1836 affects ClamAV (libclamav) prior to version 0.93. The vulnerability arises in the rfc2231 handling in message.c, where crafting a message can produce a non-null-terminated string and trigger a buffer over-read, potentially impacting availability via a crash. Connected security entri...

Heap overflow

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

DEBIAN-CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

Heap overflow

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2008-1833

CVE-2008-1833 describes a heap-based buffer overflow in pe.c of libclamav (ClamAV 0.92.1) that could allow a remote attacker to execute arbitrary code by feeding a crafted WWPack-packed PE binary. Connected advisories document affected products (ClamAV 0.92.x lineage) and indicate a fix in the 0....

ClamAV libclamav/pe.c UPACK文件处理堆溢出漏洞

BUGTRAQ ID: 28756 CVECAN ID: CVE-2008-1100 Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/pe.c文件中的cliscanpe函数在处理特制Upack可执行程序时存在堆溢出漏洞，如果杀毒软件检测到了恶意的Upack文件时就会触发这个溢出，导致执行任意指令。 ClamAV ClamAV 0.92.1 ClamAV ClamAV 0.92 ClamAV ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.clamav.net/...

Buffer overflow

Buffer overflow in the cliscanpe function in libclamav libclamav/pe.c for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file...

CVE-2008-1100

Buffer overflow in the cliscanpe function in libclamav libclamav/pe.c for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file...