SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2009-1270

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.8
Exploit Score: 10.0
Impact Score: 6.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE

Reference:

APPLE-SA-2009-09-10-2

DSA-1771

MDVSA-2009:097

USN-754-1

http://www.openwall.com/lists/oss-security/2009/04/07/6

clamav-untar-dos(49846)

http://support.apple.com/kb/HT3865

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462


30479



423868



248038



909



194772



282