ClamAV antivirus multiple security vulnerabilities updated since 15.04.2008
Published:		16.04.2008
Source:		BUGTRAQ
SecurityVulns ID:		8909
Type:		remote
Level:		7/10
Description:		Endless loop on ARJ files handling. Heap buffer overflow on WWPack'ed and PeSpin'ed PE files.

Affected:		CLAMAV : ClamAV 0.92
CVE:		CVE-2008-1387

Original document		IDEFENSE, [Full-disclosure] iDefense Security Advisory 04.14.08: ClamAV libclamav PeSpin Heap Overflow Vulnerability (16.04.2008)
		IDEFENSE, iDefense Security Advisory 04.14.08: ClamAV libclamav PE WWPack Heap Overflow Vulnerability (16.04.2008)
		Hanno Bock, [Full-disclosure] clamav: Endless loop / hang with crafter arj, CVE-2008-1387 (15.04.2008)

Discuss:

Read or add your comments to this news (0 comments)