clamav: multiple vulnerabilities [LWN.net]

Package(s):

clamav

CVE #(s):

CVE-2006-1614 CVE-2006-1615 CVE-2006-1630

Created:

April 6, 2006

Updated:

April 12, 2006

Description:

The ClamAV anti-virus toolkit has three vulnerabilities. the PE header parser has an integer overflow problem, the logging code has format string vulnerabilities that may lead to the execution of arbitrary code, and the cli_bitset_set() function can be used to create a denial of service.

Alerts:

SuSE	SUSE-SA:2006:020	2006-04-11
Mandriva	MDKSA-2006:067	2006-04-07
Gentoo	200604-06	2006-04-07
Trustix	TSLSA-2006-0020	2006-04-07
Debian	DSA-1024-1	2006-04-05

(Log in to post comments)

clamav: multiple vulnerabilities

Posted Apr 13, 2006 3:24 UTC (Thu) by epithumia (subscriber, #23370) [Link]

Fedora Extras updated clamav on April 7 as well.