clam anti-virus clamav 0.68.1 vulnerabilities and exploits

(subscribe to this query)

The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) prior to 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.

Clam Anti-virus Clamav 0.54 Clam Anti-virus Clamav 0.60 Clam Anti-virus Clamav 0.65 Clam Anti-virus Clamav 0.67 Clam Anti-virus Clamav 0.52 Clam Anti-virus Clamav 0.53 Clam Anti-virus Clamav 0.51 Clam Anti-virus Clamav 0.68 Clam Anti-virus Clamav 0.68.1

ClamAV 0.80 and previous versions allows remote malicious users to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.

Clam Anti-virus Clamav 0.53 Clam Anti-virus Clamav 0.54 Clam Anti-virus Clamav 0.60 Clam Anti-virus Clamav 0.65 Clam Anti-virus Clamav 0.52 Clam Anti-virus Clamav 0.67 Clam Anti-virus Clamav 0.68.1 Clam Anti-virus Clamav 0.51 Clam Anti-virus Clamav 0.68 Clam Anti-virus Clamav 0.80

ClamAV 0.80 and previous versions allows remote malicious users to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.

Clam Anti-virus Clamav 0.51 Clam Anti-virus Clamav 0.53 Clam Anti-virus Clamav 0.68 Clam Anti-virus Clamav 0.80 Clam Anti-virus Clamav 0.54 Clam Anti-virus Clamav 0.60 Clam Anti-virus Clamav 0.65 Clam Anti-virus Clamav 0.67 Clam Anti-virus Clamav 0.52 Clam Anti-virus Clamav 0.68.1

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) prior to 0.88.1, when ArchiveMaxFileSize is disabled, allows remote malicious users to cause a denial of service and possibly execute arbitrary code.

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) prior to 0.88 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.

The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) prior to 0.88.1 allows remote malicious users to cause a denial of service via unspecified vectors that trigger an "invalid memory access."

Unspecified vulnerability in ClamAV prior to 0.88.5 allows remote malicious users to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."

1 EDB exploit

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV prior to 0.90 allows remote malicious users to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook