Lucene search

K
ubuntuUbuntuUSN-945-1
HistoryMay 27, 2010 - 12:00 a.m.

ClamAV vulnerabilities

2010-05-2700:00:00
ubuntu.com
54

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%

Releases

  • Ubuntu 10.04
  • Ubuntu 9.10
  • Ubuntu 9.04

Packages

  • clamav - anti-virus utility for Unix

Details

It was discovered that ClamAV did not properly reallocate memory when
processing certain PDF files. A remote attacker could send a specially
crafted PDF and crash ClamAV. (CVE-2010-1639)

An out of bounds memory access flaw was discovered in ClamAV. A remote
attacker could send a specially crafted Portable Executable (PE) file
and crash ClamAV. This issue only affected Ubuntu 10.04 LTS.
(CVE-2010-2077)

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibclamav6< 0.95.3+dfsg-1ubuntu0.09.10.2UNKNOWN
Ubuntu9.10noarchclamav< 0.95.3+dfsg-1ubuntu0.09.10.2UNKNOWN
Ubuntu9.10noarchclamav-daemon< 0.95.3+dfsg-1ubuntu0.09.10.2UNKNOWN
Ubuntu9.10noarchclamav-dbg< 0.95.3+dfsg-1ubuntu0.09.10.2UNKNOWN
Ubuntu9.10noarchclamav-freshclam< 0.95.3+dfsg-1ubuntu0.09.10.2UNKNOWN
Ubuntu9.10noarchclamav-milter< 0.95.3+dfsg-1ubuntu0.09.10.2UNKNOWN
Ubuntu9.10noarchlibclamav-dev< 0.95.3+dfsg-1ubuntu0.09.10.2UNKNOWN
Ubuntu9.04noarchlibclamav6< 0.95.3+dfsg-1ubuntu0.09.04.2UNKNOWN
Ubuntu9.04noarchclamav< 0.95.3+dfsg-1ubuntu0.09.04.2UNKNOWN
Ubuntu9.04noarchclamav< daemon-0.95.3+dfsg-1ubuntu0.09.04.2UNKNOWN
Rows per page:
1-10 of 211

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%