ClamAV antivirus double free vulnerability - security vulnerabilities database

[EN] securityvulns.ru
no-pyccku

ClamAV antivirus double free vulnerability
Published: 01.03.2011
Source: BUGTRAQ
SecurityVulns ID: 11474
Type: remote
Level: 5/10
Description: Double free() vuonerability on microsoft office documents VBA code parsing.

Affected: CLAMAV : ClamAV 0.96
CVE: CVE-2011-1003 (Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.)

Discuss: Read or add your comments to this news (0 comments)