Wazi » clamav http://olex.openlogic.com/wazi Thinking OPEN Fri, 06 Nov 2009 19:33:28 +0000 http://wordpress.org/?v=2.8.5 en hourly 1 Clamav 0.93.3 and prior [Medium] http://olex.openlogic.com/wazi/2009/clamav-0933-and-prior-medium-2/ http://olex.openlogic.com/wazi/2009/clamav-0933-and-prior-medium-2/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2009/clamav-0933-and-prior-medium-2/ Affects:
  • Clamav 0.93.3 and prior [Medium]

Description

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-6845
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2009/clamav-0933-and-prior-medium-2/feed/ 0 Clamav 0.95 and prior [Medium] http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-medium/ http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-medium/ Affects:
  • Clamav 0.95 and prior [Medium]

Description

The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2009-1371
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-medium/feed/ 0 Clamav 0.95 and prior [Unknown Severity] http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-unknown-severity/ http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-unknown-severity/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-unknown-severity/ Affects:
  • Clamav 0.95 and prior [Unknown Severity]

Description

Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2009-1372
Severity: Unknown Severity

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2009/clamav-095-and-prior-unknown-severity/feed/ 0 Clamav 0.94.1 and prior [High] http://olex.openlogic.com/wazi/2009/clamav-0941-and-prior-high/ http://olex.openlogic.com/wazi/2009/clamav-0941-and-prior-high/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2009/clamav-0941-and-prior-high/ Affects:
  • Clamav 0.94.1 and prior [High]

Description

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2009-1270
Severity: High

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2009/clamav-0941-and-prior-high/feed/ 0 Clamav 0.94.2 and prior [Medium] http://olex.openlogic.com/wazi/2009/clamav-0942-and-prior-medium/ http://olex.openlogic.com/wazi/2009/clamav-0942-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2009/clamav-0942-and-prior-medium/ Affects:
  • Clamav 0.94.2 and prior [Medium]

Description

libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-6680
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2009/clamav-0942-and-prior-medium/feed/ 0 Clamav 0.91rc2 and prior [High] http://olex.openlogic.com/wazi/2009/clamav-091rc2-and-prior-high/ http://olex.openlogic.com/wazi/2009/clamav-091rc2-and-prior-high/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2009/clamav-091rc2-and-prior-high/ Affects:
  • Clamav 0.91rc2 and prior [High]

Description

Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2009-1241
Severity: High

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2009/clamav-091rc2-and-prior-high/feed/ 0 Clamav 7 and prior [High] http://olex.openlogic.com/wazi/2008/clamav-7-and-prior-high/ http://olex.openlogic.com/wazi/2008/clamav-7-and-prior-high/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-7-and-prior-high/ Affects:
  • Clamav 7 and prior [High]

Description

ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka “EXE info”) at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-5525
Severity: High

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-7-and-prior-high/feed/ 0 Clamav 0.94.1 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-0941-and-prior-medium/ http://olex.openlogic.com/wazi/2008/clamav-0941-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-0941-and-prior-medium/ Affects:
  • Clamav 0.94.1 and prior [Medium]

Description

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-5314
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-0941-and-prior-medium/feed/ 0 Clamav 0.91rc2 and prior [High] http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-high-2/ http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-high-2/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-high-2/ Affects:
  • Clamav 0.91rc2 and prior [High]

Description

Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-5050
Severity: High

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-high-2/feed/ 0 Clamav 0.91rc2 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-3/ http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-3/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-3/ Affects:
  • Clamav 0.91rc2 and prior [Medium]

Description

libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an out-of-memory condition.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-3912
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-3/feed/ 0 Clamav 0.91rc2 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-4/ http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-4/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-4/ Affects:
  • Clamav 0.91rc2 and prior [Medium]

Description

Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to “error handling logic”.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-3913
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-4/feed/ 0 Clamav 0.91rc2 and prior [Unknown Severity] http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-unknown-severity/ http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-unknown-severity/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-unknown-severity/ Affects:
  • Clamav 0.91rc2 and prior [Unknown Severity]

Description

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the “error path” in (1) libclamav/others.c and (2) libclamav/sis.c.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-3914
Severity: Unknown Severity

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-unknown-severity/feed/ 0 Clamav 0.93.3 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-0933-and-prior-medium/ http://olex.openlogic.com/wazi/2008/clamav-0933-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-0933-and-prior-medium/ Affects:
  • Clamav 0.93.3 and prior [Medium]

Description

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an “invalid memory access.”

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-1389
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-0933-and-prior-medium/feed/ 0 Clamav 0.93 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-093-and-prior-medium/ http://olex.openlogic.com/wazi/2008/clamav-093-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-093-and-prior-medium/ Affects:
  • Clamav 0.93 and prior [Medium]

Description

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-3215
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-093-and-prior-medium/feed/ 0 Clamav 0.90_rc3 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-090_rc3-and-prior-medium/ http://olex.openlogic.com/wazi/2008/clamav-090_rc3-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-090_rc3-and-prior-medium/ Affects:
  • Clamav 0.90_rc3 and prior [Medium]

Description

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-2713
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-090_rc3-and-prior-medium/feed/ 0 Clamav 0.90rc1 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium/ http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium/ Affects:
  • Clamav 0.90rc1 and prior [Medium]

Description

ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-1387
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium/feed/ 0 Clamav 0.91rc2 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium/ http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium/ Affects:
  • Clamav 0.91rc2 and prior [Medium]

Description

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-1835
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium/feed/ 0 Clamav 0.90rc1 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium-2/ http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium-2/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium-2/ Affects:
  • Clamav 0.90rc1 and prior [Medium]

Description

The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-1836
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-090rc1-and-prior-medium-2/feed/ 0 Clamav 0.91rc2 and prior [Medium] http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-2/ http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-2/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-2/ Affects:
  • Clamav 0.91rc2 and prior [Medium]

Description

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger “memory problems,” as demonstrated by the PROTOS GENOME test suite for Archive Formats.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-1837
Severity: Medium

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-091rc2-and-prior-medium-2/feed/ 0 Clamav 0.92.1 [High] http://olex.openlogic.com/wazi/2008/clamav-0921-high/ http://olex.openlogic.com/wazi/2008/clamav-0921-high/#comments Tue, 30 Nov 1999 06:00:00 +0000 Security Team http://olex.openlogic.com/wazi/2008/clamav-0921-high/ Affects:
  • Clamav 0.92.1 [High]

Description

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value.

If you have questions about this security warning or need to have it translated and you have an active technical support contract, please call 1-888-OPENLOGIC or email us at support@openlogic.com.

CVE Identifier: CVE-2008-0314
Severity: High

National Vulnerabilities Database

NIST National Vulnerabilities Database

]]> http://olex.openlogic.com/wazi/2008/clamav-0921-high/feed/ 0