SUSE-SA:2005:055: clamav

The remote host is missing the patch for the advisory SUSE-SA:2005:055 clamav. This update upgrades clamav to version 0.87. It fixes vulnerabilities in handling of UPX and FSG compressed executables, which could lead to a remote attacker executing code within the daemon using clamav. These are...

GLSA-200509-13 : Clam AntiVirus: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200509-13 Clam AntiVirus: Multiple vulnerabilities Clam AntiVirus is vulnerable to a buffer overflow in 'libclamav/upx.c' when processing malformed UPX-packed executables. It can also be sent into an infinite loop in...

Clam AntiVirus contains a buffer overflow vulnerability

Overview A buffer overflow in Clam AntiVirus ClamAV may allow a remote attacker to execute arbitrary code. Description Clam AntiVirus is a UNIX-based, anti-virus toolkit often deployed with mail servers to detect malicious attachments. A signedness error in ClamAV libclamav/upx.c may allow a buff...

Multiple ClamAV antivirus vulnerabilities

Buffer overflow on checking UPX-packed files, infinite loop on checking FSG-packed files...

CVE-2005-2920

Buffer overflow in libclamav/upx.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable...

CVE-2005-2920

Buffer overflow in libclamav/upx.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable...

CVE-2005-2920

Buffer overflow in libclamav/upx.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable...

CVE-2005-2920

Buffer overflow in libclamav/upx.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable...

CVE-2005-2920

CVE-2005-2920 : ClamAV is affected by a buffer overflow in libclamav/upx.c when processing UPX-packed executables. The issue allows a remote attacker to potentially execute arbitrary code by sending a crafted UPX-packed file. Public entries and advisories confirm this in ClamAV versions prior to ...

CVE-2005-2920: Undefined Security Weakness

Buffer overflow in libclamav/upx.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable...

SYM05-003 Symantec UPX Parsing Engine Heap Overflow

Symantec Security Advisory SYM05-003 08 February, 2005 Symantec UPX Parsing Engine Heap Overflow Revision History 2/9/2005 - Updated Vulnerability details and mitigations. Updated CVE Candidate Number 2/11/2005 - Configuration modifications tested and added to disable vulnerable module in SAVCE a...

Symantec products vulnerable to buffer overflow via a specially crafted UPX file

Overview The Symantec AntiVirus Library DEC2EXE component is vulnerable to remote arbitrary code execution. Description The Symantec AntiVirus Library is used in many Symantec and third-party virus scanning products, including Symantec Norton Antivirus and Symantec BrightMail AntiSpam.The AntiVir...

Symantec UPX Parsing Engine Heap Overflow

SUMMARY Symantec resolved a potential remote access compromise vulnerability reported by ISS X-Force. The vulnerability was identified in an early version of a Symantec antivirus scanning module responsible for parsing UPX compressed files that is still in limited use in some Symantec security...

CVE-2005-0249

Concretely affected: Symantec AntiVirus/Scan Engine DEC2EXE parsing engine (DEC2EXE.dll) used in the Symantec Antivirus Library. Issue: a heap-based buffer overflow caused by improper bounds checking when parsing UPX-compressed files, triggered by a crafted UPX file with a negative virtual offset...

CVE-2005-0249

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header...

Immunity Canvas: NORTON_UPX

Name| nortonupx ---|--- CVE| CVE-2005-0249 Exploit Pack| CANVAS Description| nortonupx Notes| CVE Name: CVE-2005-0249 Found by: Alex Wheeler VENDOR: Symantec URL: http://xforce.iss.net/xforce/alerts/id/187 VersionsAffected: Any 2004 Repeatability: This is a one shot exploit, but the process won't...

CVE-2005-0249

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header...

CVE-2005-0249: Undefined Security Weakness

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header...

AVG Scanning Engine UPX Parsing Denial of Service Vulnerability

Binary data 5021.prm...

CVE-2001-1149

Panda Antivirus Platinum before 6.23.00 is affected. Affects handling of malformed UPX-packed executables; triggering a denial of service (crash) when a user selects an action for such files. The available sources (NVD/CVE records) confirm the product/version and impact but do not provide exploit...