ClamAV Multiple Vulnerabilities
RISK: Medium Risk
Multiple vulnerabilities have been identified in ClamAV, which could be exploited by attackers or malware to cause a denial of service or execute arbitrary code.
1. The errors in the "libclamav/pdf.c" file, which could be exploited to crash an affected application.
2. An off-by-one error in "libclamav/pe_icons.c", which could be exploited to crash an affected application or execute arbitrary code.
3. The use of uninitialized values within libclamav, which could be exploited to cause a denial of service or potentially execute arbitrary code.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- ClamAV version 0.96.4 and prior
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
Upgrade to ClamAV version 0.96.5 :
http://www.clamav.net/download
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with