clam anti-virus clamav 0.83 vulnerabilities and exploits

(subscribe to this query)

The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote malicious users to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes ...

Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.84 Rc2 Clam Anti-virus Clamav 0.85.1 Clam Anti-virus Clamav 0.84 Rc1 Clam Anti-virus Clamav 0.85

Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote malicious users to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.

Clam Anti-virus Clamav 0.81 Clam Anti-virus Clamav 0.82 Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.84 Rc2 Clam Anti-virus Clamav 0.84 Rc1

1 EDB exploit

The MS-Expand file handling in Clam AntiVirus (ClamAV) prior to 0.86 allows remote malicious users to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.

Clam Anti-virus Clamav 0.85 Clam Anti-virus Clamav 0.85.1 Clam Anti-virus Clamav 0.81 Clam Anti-virus Clamav 0.82 Clam Anti-virus Clamav 0.84 Rc1 Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.84 Rc2

The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 up to and including 0.87 allows remote malicious users to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.

Clam Anti-virus Clamav 0.80 Clam Anti-virus Clamav 0.81 Clam Anti-virus Clamav 0.86.1 Clam Anti-virus Clamav 0.86.2 Clam Anti-virus Clamav 0.82 Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.87 Clam Anti-virus Clamav 0.84 Clam Anti-virus Clamav 0.85 Clam Anti-virus Clamav 0.85.1 Clam Anti-virus Clamav 0.86

Clam AntiVirus (ClamAV) 0.88 and previous versions allows remote malicious users to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) prior to 0.88.1, when ArchiveMaxFileSize is disabled, allows remote malicious users to cause a denial of service and possibly execute arbitrary code.

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook