The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
clam anti-virus clamav 0.23 |
||
clam anti-virus clamav 0.24 |
||
clam anti-virus clamav 0.67 |
||
clam anti-virus clamav 0.68 |
||
clam anti-virus clamav 0.75.1 |
||
clam anti-virus clamav 0.80 |
||
clam anti-virus clamav 0.86 |
||
clam anti-virus clamav 0.86.1 |
||
clam anti-virus clamav 0.21 |
||
clam anti-virus clamav 0.22 |
||
clam anti-virus clamav 0.60 |
||
clam anti-virus clamav 0.65 |
||
clam anti-virus clamav 0.74 |
||
clam anti-virus clamav 0.75 |
||
clam anti-virus clamav 0.85 |
||
clam anti-virus clamav 0.85.1 |
||
clam anti-virus clamav 0.15 |
||
clam anti-virus clamav 0.20 |
||
clam anti-virus clamav 0.53 |
||
clam anti-virus clamav 0.54 |
||
clam anti-virus clamav 0.71 |
||
clam anti-virus clamav 0.72 |
||
clam anti-virus clamav 0.73 |
||
clam anti-virus clamav 0.83 |
||
clam anti-virus clamav 0.84 |
||
clam anti-virus clamav 0.51 |
||
clam anti-virus clamav 0.52 |
||
clam anti-virus clamav 0.68.1 |
||
clam anti-virus clamav 0.70 |
||
clam anti-virus clamav 0.81 |
||
clam anti-virus clamav 0.82 |
||
clam anti-virus clamav 0.86.2 |
||
clam anti-virus clamav 0.87 |
Vulmon