ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow

''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...

ClamAV 0.91.2 libclamav MEW PE Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ====================================================== ClamAV 0.91.2 libclamav MEW PE Buffer Overflow Exploit ====================================================== ''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet email protected we ow...

CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

SuSE 10 Security Update : clamav (ZYPP Patch Number 4836)

This version upgrade to 0.92 fixes numerous flaws including some security problems. CVE-2007-6335 / CVE-2007-6336 / CVE-2007-6337 Please note that the version number of the clamav library has changed. Programs linked against libclamav therefore need to be updated as well. %NASLMINLEVEL 70300 C...

Integer overflow

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...

CVE-2007-6335

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...

CVE-2007-6335

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...

CVE-2007-6335

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...

iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability

iDefense Security Advisory 12.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 18, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform anti-virus toolkit released under the GNU Public License. ClamAV is often integrated into e-mail gateways and used to scan e-mail messages for...

openSUSE 10 Security Update : clamav (clamav-2242)

The virus scan engine ClamAV was update to version 0.88.6. Following issues are fixed by this update : - freshclam: apply timeout patch from Everton da Silva Marques new options: ConnectTimeout and ReceiveTimeout - clamd: change stack size at the right place closes clamav bug103 -...

FreeBSD : clamav -- multiple vulnerabilities (903654bd-1927-11dc-b8a0-02e0185f8d72)

Clamav had been found vulnerable to multiple vulnerabilities : - Improper checking for the end of an buffer causing an unspecified attack vector. - Insecure temporary file handling, which could be exploited to read sensitive information. - A flaw in the parser engine which could allow a remote...

Code injection

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

CVE-2007-3025

CVE-2007-3025 affects ClamAV through libclamav/phishcheck.c on Solaris, where versions before 0.90.3 and 0.91 before 0.91rc1 are vulnerable. The issue permits remote denial of service (hang) via unknown vectors related to the isURL function and regex handling. Remediation is upgrading to ClamAV 0...

Heap overflow

unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service core dump via a crafted RAR file with a modified vmcodesize value, which triggers a heap-based buffer overflow...

CVE-2007-3123

unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service core dump via a crafted RAR file with a modified vmcodesize value, which triggers a heap-based buffer overflow...

CVE-2007-3123

unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service core dump via a crafted RAR file with a modified vmcodesize value, which triggers a heap-based buffer overflow...

CVE-2007-1745

CVE-2007-1745 affects ClamAV prior to 0.90.2, where the function chm_decompress_stream in libclamav/chmunpack.c leaks file descriptors when processing a crafted CHM file. The description from the initial document states the impact is unknown and does not specify a concrete exploit path or affecte...

FreeBSD : clamav -- heap overflow vulnerability (342d2e48-26db-11db-9275-000475abc56f)

"Clamav team reports : A heap overflow vulnerability was discovered in libclamav which could cause a denial of service or allow the execution of arbitrary code. The problem is specifically located in the PE file rebuild function used by the UPX unpacker. Relevant code from libclamav/upx.c :...

clamav -- heap overflow vulnerability

Clamav team reports: A heap overflow vulnerability was discovered in libclamav which could cause a denial of service or allow the execution of arbitrary code. The problem is specifically located in the PE file rebuild function used by the UPX unpacker. Relevant code from libclamav/upx.c: memcpyds...

[Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (not default configuration)

Overflow.pl Security Advisory 5 Clam AntiVirus Win32-UPX Heap Overflow not default configuration Vendor: Clam AntiVirus Affected version: Prior to 0.88.1 Vendor status: Fixed version released 0.88.1 Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/clamavupxinteger.txt Date:...