clamav: multiple vulnerabilities [LWN.net]

Package(s):

clamav

CVE #(s):

CVE-2006-4182 CVE-2006-5295

Created:

October 18, 2006

Updated:

October 24, 2006

Description:

Clamav contains an integer overflow vulnerability in its handling of portable executable (PE) files, with a code-execution exploit being possible. There is also a denial-of-service vulnerability in the handling of compressed HTML files.

Alerts:

Gentoo	200610-10	2006-10-24
Debian	DSA-1196-1	2006-10-19
SuSE	SUSE-SA:2006:060	2006-10-18
Mandriva	MDKSA-2006:184	2006-10-17

(Log in to post comments)