clam anti-virus clamav 0.81 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote malicious users to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.

Clam Anti-virus Clamav 0.81 Clam Anti-virus Clamav 0.82 Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.84 Rc2 Clam Anti-virus Clamav 0.84 Rc1

1 EDB exploit

The MS-Expand file handling in Clam AntiVirus (ClamAV) prior to 0.86 allows remote malicious users to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.

Clam Anti-virus Clamav 0.85 Clam Anti-virus Clamav 0.85.1 Clam Anti-virus Clamav 0.81 Clam Anti-virus Clamav 0.82 Clam Anti-virus Clamav 0.84 Rc1 Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.84 Rc2

The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 up to and including 0.87 allows remote malicious users to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.

Clam Anti-virus Clamav 0.80 Clam Anti-virus Clamav 0.81 Clam Anti-virus Clamav 0.86.1 Clam Anti-virus Clamav 0.86.2 Clam Anti-virus Clamav 0.82 Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.87 Clam Anti-virus Clamav 0.84 Clam Anti-virus Clamav 0.85 Clam Anti-virus Clamav 0.85.1 Clam Anti-virus Clamav 0.86

Clam AntiVirus (ClamAV) 0.88 and previous versions allows remote malicious users to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) prior to 0.88.1, when ArchiveMaxFileSize is disabled, allows remote malicious users to cause a denial of service and possibly execute arbitrary code.

The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) prior to 0.88.1 allows remote malicious users to cause a denial of service via unspecified vectors that trigger an "invalid memory access."

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook