ClamAV antivirus multiple vulnerabilities updated since 04.11.2005
Published:		13.01.2006
Source:		SECUNIA
SecurityVulns ID:		5419
Type:		remote
Level:		7/10
Description:		Buffer overflow on handling FSG and UPX packed files, endless loops on CAB and TNEF files parsing.

Affected:

CLAMAV : ClamAV 0.87

Original document		ZDI, [Full-disclosure] ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability (13.01.2006)
		SECUNIA, [SA18379] ClamAV Unspecified UPX File Handling Vulnerability (10.01.2006)
		IDEFENSE, [Full-disclosure] iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability (05.11.2005)
		IDEFENSE, [Full-disclosure] iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability (05.11.2005)
		ZDI, [Full-disclosure] ZDI-05-002: Clam Antivirus Remote Code Execution (05.11.2005)
		SECUNIA, [SA17434] Clam AntiVirus TNEF/CAB/FSG File Handling Vulnerabilities (04.11.2005)

Discuss:

Read or add your comments to this news (0 comments)