clamav: arbitrary code execution [LWN.net]

Package(s):

clamav

CVE #(s):

CVE-2008-0318

Created:

February 13, 2008

Updated:

April 18, 2008

Description:

From the CVE:

Integer overflow in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.

Alerts:

Mandriva	MDVSA-2008:088	2007-04-17
SuSE	SUSE-SR:2008:004	2008-02-22
Gentoo	200802-09	2008-02-21
Debian	DSA-1497-1	2008-02-16
Fedora	FEDORA-2008-1625	2008-02-13
Fedora	FEDORA-2008-1608	2008-02-13

(Log in to post comments)

clamav: arbitrary code execution

Posted Feb 16, 2008 20:44 UTC (Sat) by kitterma (guest, #4448) [Link]

FYI, the Ubuntu packages are all updated for these issues too, but don't get Ubuntu Security
Notices (USN) because they aren't in the Main Ubuntu repository.