CVE-2010-2840

The Presence Engine PE service in Cisco Unified Presence 6.x before 6.07 and 7.x before 7.08 does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service process failure via a malformed message, aka Bug ID...

Microsoft Malware Protection Engine File Processing Denial of Service (CVE-2008-1437)

Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the antivirus and antispyware clients from Microsoft. The applications that use this engine for their operation are: There exists a vulnerability in Microsoft Malware Protection Engine, which can be...

Mandriva Update for clamav MDVSA-2010:110 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2010:110 clamav Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[ MDVSA-2010:110 ] clamav

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:110 http://www.mandriva.com/security/ Package : clamav Date : May 27, 2010 Affected: 2008.0, 2009.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was discovered and fixe...

ClamAV antivirus multiple security vulnerabilities

Memory corruptions on PDF and PE files parsing...

Ubuntu 9.04 / 9.10 / 10.04 LTS : clamav vulnerabilities (USN-945-1)

It was discovered that ClamAV did not properly reallocate memory when processing certain PDF files. A remote attacker could send a specially crafted PDF and crash ClamAV. CVE-2010-1639 An out of bounds memory access flaw was discovered in ClamAV. A remote attacker could send a specially crafted...

Mandriva Linux Security Advisory : clamav (MDVSA-2010:110)

Multiple vulnerabilities was discovered and fixed in clamav : The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...

ClamAV < 0.96.1 Multiple DoS Vulnerabilities - Windows

ClamAV is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"...

USN-945-1: ClamAV vulnerabilities

It was discovered that ClamAV did not properly reallocate memory when processing certain PDF files. A remote attacker could send a specially crafted PDF and crash ClamAV. CVE-2010-1639 An out of bounds memory access flaw was discovered in ClamAV. A remote attacker could send a specially crafted...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

DEBIAN-CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

Out-of-bounds

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

CVE-2010-1640

CVE-2010-1640 is an off-by-one/read out-of-bounds vulnerability in ClamAV 0.96 (parseicon in libclamav/pe_icons.c) that can cause a remote denial of service via a crafted PE icon. Connected advisories and public feeds corroborate the issue as a remote DoS, tied to improper rounding during scaling...

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

ClamAV < 0.96.1 Multiple Vulnerabilities

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.96.1. Such versions are reportedly affected by multiple vulnerabilities : - An error exists within the 'clipdf' function in 'libclamav/pdf.c' when processing certain PDF files. Bug 2016 - An error exists...

Microsoft Windows file signature spoofing

Signature spoofing in PE and CAB files...

CVE-2010-0486

CVE-2010-0486 describes a remote code execution vulnerability in Windows Authenticode Signature Verification (WinVerifyTrust) affecting PE and cabinet (.CAB) handling. The flaw arises from improper use of certain file digest fields during signing/verifying, enabling a modified signed file to exec...