Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:DL:CLAMAV-INT |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
ClamAV CHM File Handling Integer Overflow |
Release Date |
2010/09/15 |
Update Number |
1773 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: ClamAV CHM File Handling Integer Overflow
This signature detects attempts to exploit a known vulnerability in the ClamAV. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the process.
Extended Description
ClamAV is susceptible to multiple integer overflow vulnerabilities. Specifically, the vulnerabilities present themselves when the ClamAV antivirus library handles malformed files. This may allow attackers to control the flow of execution, and potentially execute attacker-supplied code in the context of the affected application. ClamAV 0.86.1 and prior versions are reported to be affected.
Affected Products
- Clam_anti-virus clamav 0.51.0
- Clam_anti-virus clamav 0.52.0
- Clam_anti-virus clamav 0.53.0
- Clam_anti-virus clamav 0.54.0
- Clam_anti-virus clamav 0.60.0
- Clam_anti-virus clamav 0.65.0
- Clam_anti-virus clamav 0.67.0
- Clam_anti-virus clamav 0.68.0
- Clam_anti-virus clamav 0.68.0 -1
- Clam_anti-virus clamav 0.70.0
- Clam_anti-virus clamav 0.80.0
- Clam_anti-virus clamav 0.80.0 Rc1
- Clam_anti-virus clamav 0.80.0 Rc2
- Clam_anti-virus clamav 0.80.0 Rc3
- Clam_anti-virus clamav 0.80.0 Rc4
- Clam_anti-virus clamav 0.81.0
- Clam_anti-virus clamav 0.82.0
- Clam_anti-virus clamav 0.83.0
- Clam_anti-virus clamav 0.84.0
- Clam_anti-virus clamav 0.84.0 Rc1
- Clam_anti-virus clamav 0.84.0 Rc2
- Clam_anti-virus clamav 0.85.0
- Clam_anti-virus clamav 0.85.1
- Clam_anti-virus clamav 0.86.0
- Clam_anti-virus clamav 0.86.0 .1
- Conectiva linux 10.0.0
- Conectiva linux 9.0.0
- Debian linux 3.1.0
- Debian linux 3.1.0 Alpha
- Debian linux 3.1.0 Amd64
- Debian linux 3.1.0 Arm
- Debian linux 3.1.0 Hppa
- Debian linux 3.1.0 Ia-32
- Debian linux 3.1.0 Ia-64
- Debian linux 3.1.0 M68k
- Debian linux 3.1.0 Mips
- Debian linux 3.1.0 Mipsel
- Debian linux 3.1.0 Ppc
- Debian linux 3.1.0 S/390
- Debian linux 3.1.0 Sparc
- Gentoo linux
- Mandriva corporate_server 3.0.0
- Mandriva corporate_server 3.0.0 X86 64
- Mandriva linux_mandrake 10.1.0
- Mandriva linux_mandrake 10.1.0 X86 64
- Mandriva linux_mandrake 10.2.0
- Mandriva linux_mandrake 10.2.0 X86 64
- Suse linux_personal 9.1.0
- Suse linux_personal 9.1.0 X86 64
- Suse linux_personal 9.2.0
- Suse linux_personal 9.2.0 X86 64
- Suse linux_personal 9.3.0
- Suse linux_personal 9.3.0 X86 64
- Suse linux_professional 9.1.0
- Suse linux_professional 9.1.0 X86 64
- Suse linux_professional 9.2.0
- Suse linux_professional 9.2.0 X86 64
- Suse linux_professional 9.3.0
- Suse linux_professional 9.3.0 X86 64
- Suse suse_linux_enterprise_server 9
References
- BugTraq: 14359
- CVE: CVE-2005-2450