clam anti-virus clamav 0.53 vulnerabilities and exploits

(subscribe to this query)

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) prior to 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.

Clam Anti-virus Clamav 0.54 Clam Anti-virus Clamav 0.60 Clam Anti-virus Clamav 0.65 Clam Anti-virus Clamav 0.67 Clam Anti-virus Clamav 0.52 Clam Anti-virus Clamav 0.53 Clam Anti-virus Clamav 0.51 Clam Anti-virus Clamav 0.68 Clam Anti-virus Clamav 0.68.1

ClamAV 0.80 and previous versions allows remote malicious users to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.

Clam Anti-virus Clamav 0.53 Clam Anti-virus Clamav 0.54 Clam Anti-virus Clamav 0.60 Clam Anti-virus Clamav 0.65 Clam Anti-virus Clamav 0.52 Clam Anti-virus Clamav 0.67 Clam Anti-virus Clamav 0.68.1 Clam Anti-virus Clamav 0.51 Clam Anti-virus Clamav 0.68 Clam Anti-virus Clamav 0.80

ClamAV 0.80 and previous versions allows remote malicious users to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.

Clam Anti-virus Clamav 0.51 Clam Anti-virus Clamav 0.53 Clam Anti-virus Clamav 0.68 Clam Anti-virus Clamav 0.80 Clam Anti-virus Clamav 0.54 Clam Anti-virus Clamav 0.60 Clam Anti-virus Clamav 0.65 Clam Anti-virus Clamav 0.67 Clam Anti-virus Clamav 0.52 Clam Anti-virus Clamav 0.68.1

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) prior to 0.88.1, when ArchiveMaxFileSize is disabled, allows remote malicious users to cause a denial of service and possibly execute arbitrary code.

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) prior to 0.88 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.

The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) prior to 0.88.1 allows remote malicious users to cause a denial of service via unspecified vectors that trigger an "invalid memory access."

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions prior to 0.88.5, allows remote malicious users to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow ...

1 EDB exploit

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV prior to 0.90 allows remote malicious users to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook