clam anti-virus clamav 0.87 vulnerabilities and exploits

(subscribe to this query)

The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 up to and including 0.87 allows remote malicious users to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.

Clam Anti-virus Clamav 0.80 Clam Anti-virus Clamav 0.81 Clam Anti-virus Clamav 0.86.1 Clam Anti-virus Clamav 0.86.2 Clam Anti-virus Clamav 0.82 Clam Anti-virus Clamav 0.83 Clam Anti-virus Clamav 0.87 Clam Anti-virus Clamav 0.84 Clam Anti-virus Clamav 0.85 Clam Anti-virus Clamav 0.85.1 Clam Anti-virus Clamav 0.86

Clam AntiVirus (ClamAV) 0.88 and previous versions allows remote malicious users to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) prior to 0.88.1 allows remote malicious users to cause a denial of service via unspecified vectors that trigger an "invalid memory access."

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) prior to 0.88 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) prior to 0.88.1, when ArchiveMaxFileSize is disabled, allows remote malicious users to cause a denial of service and possibly execute arbitrary code.

Stack consumption vulnerability in libclamav/special.c in ClamAV prior to 0.94.2 allows remote malicious users to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions...

1 EDB exploit

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV prior to 0.90 allows remote malicious users to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook