Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary….
CVE Identifier: CVE-2008-1833
Vulnerability Type(s):
Severity: High
Posts Tagged ‘clamav’
Clamav 0.92.1 [High]
By Security Team • Apr 16th, 2008 • Category: Security NotificationsClamav 0.92.1 and prior [Unknown Severity]
By Security Team • Apr 14th, 2008 • Category: Security NotificationsBuffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file….
CVE Identifier: CVE-2008-1100
Vulnerability Type(s):
Severity: Unknown Severity
Clamav 0.92 [Unknown Severity]
By Security Team • Feb 12th, 2008 • Category: Security NotificationsInteger overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow….
CVE Identifier: CVE-2008-0318
Vulnerability Type(s):
Severity: Unknown Severity
Clamav 0.92 [Unknown Severity]
By Security Team • Feb 12th, 2008 • Category: Security NotificationsThe unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger “heap corruption.”…
CVE Identifier: CVE-2008-0728
Vulnerability Type(s):
Severity: Unknown Severity
Clamav 0.92 [Low]
By Security Team • Dec 31st, 2007 • Category: Security NotificationsClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled….
CVE Identifier: CVE-2007-6595
Vulnerability Type(s):
Severity: Low
Clamav 0.92 [Medium]
By Security Team • Dec 31st, 2007 • Category: Security NotificationsClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file….
CVE Identifier: CVE-2007-6596
Vulnerability Type(s):
Severity: Medium
Clamav 0.92 [High]
By Security Team • Dec 19th, 2007 • Category: Security NotificationsInteger overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow….
CVE Identifier: CVE-2007-6335
Vulnerability Type(s):
Severity: High
Clamav 0.92 [Medium]
By Security Team • Dec 19th, 2007 • Category: Security NotificationsOff-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file….
CVE Identifier: CVE-2007-6336
Vulnerability Type(s):
Severity: Medium
Clamav 0.91.2 and prior [High]
By Security Team • Nov 19th, 2007 • Category: Security NotificationsUnspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message…
CVE Identifier: CVE-2007-6029
Vulnerability Type(s):
Severity: High
Clamav 0.91.1 [High]
By Security Team • Aug 27th, 2007 • Category: Security Notificationsclamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the “recipient field of sendmail.”…
CVE Identifier: CVE-2007-4560
Vulnerability Type(s):
Severity: High
