Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clamav | Clam_anti-virus | 0.85 (including) | 0.85 (including) |
| Clamav | Clam_anti-virus | 0.85.1 (including) | 0.85.1 (including) |
| Clamav | Clam_anti-virus | 0.86 (including) | 0.86 (including) |
| Clamav | Ubuntu | dapper | * |
| Clamav | Ubuntu | devel | * |
| Clamav | Ubuntu | edgy | * |
| Clamav | Ubuntu | feisty | * |
References
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000987
- http://marc.info/?l=bugtraq\u0026m=112230864412932\u0026w=2
- http://secunia.com/advisories/16180
- http://secunia.com/advisories/16229
- http://secunia.com/advisories/16250
- http://secunia.com/advisories/16296
- http://secunia.com/advisories/16458
- http://security.gentoo.org/glsa/glsa-200507-25.xml
- http://sourceforge.net/project/shownotes.php?release_id=344514
- http://www.novell.com/linux/security/advisories/2005_18_sr.html
- http://www.osvdb.org/18257
- http://www.osvdb.org/18258
- http://www.osvdb.org/18259
- http://www.securityfocus.com/bid/14359
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21555
- http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000987
- http://marc.info/?l=bugtraq\u0026m=112230864412932\u0026w=2
- http://secunia.com/advisories/16180
- http://secunia.com/advisories/16229
- http://secunia.com/advisories/16250
- http://secunia.com/advisories/16296
- http://secunia.com/advisories/16458
- http://security.gentoo.org/glsa/glsa-200507-25.xml
- http://sourceforge.net/project/shownotes.php?release_id=344514
- http://www.novell.com/linux/security/advisories/2005_18_sr.html
- http://www.osvdb.org/18257
- http://www.osvdb.org/18258
- http://www.osvdb.org/18259
- http://www.securityfocus.com/bid/14359
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21555