[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250039

 
 

909

 
 

195882

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

MDVSA-2012:094 -- Mandriva clamav

ID: oval:org.secpod.oval:def:1300082Date: (C)2013-01-07   (M)2022-10-10
Class: PATCHFamily: unix




This is a bugfix release that upgrades clamav to the latest version that resolves the following security issues: The TAR file parser in ClamAV 0.96.4 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations . The Microsoft CHM file parser in ClamAV 0.96.4 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations . The TAR file parser in ClamAV 0.96.4 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations .

Platform:
Mandriva Enterprise Server 5.2
Product:
clamav
Reference:
MDVSA-2012:094
CVE-2012-1459
CVE-2012-1457
CVE-2012-1458
CVE    3
CVE-2012-1457
CVE-2012-1458
CVE-2012-1459
CPE    1
cpe:/o:mandriva:enterprise_server:5.2

© SecPod Technologies