ClamAVcli_url_canon()" Buffer Overflow and UPack DoS Vulnerabilities
RISK: Medium Risk
Multiple vulnerabilities have been identified in ClamAV, which could be exploited by attackers or malware to cause a denial of service or compromise a vulnerable system.
1. A buffer overflow error in the "cli_url_canon()" [libclamav/phishcheck.c] function when processing specially crafted URLs, which could be exploited by attackers to compromise a vulnerable system.
2. An error when processing malformed files packed with UPack, which could be exploited by attackers or malware to crash an affected application.
Impact
- Denial of Service
- Remote Code Execution
System / Technologies affected
- ClamAV versions prior to 0.95.1
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
Upgrade to ClamAV version 0.95.1 :
http://www.clamav.net/download/
Vulnerability Identifier
- No CVE information is available
Source
Share with