Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

clamav: denial of service

Package(s):

clamav

CVE #(s):

CVE-2008-3215

Created:

August 8, 2008

Updated:

August 13, 2008

Description:

From the CVE entry:

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Alerts:

Gentoo	200808-07	2008-08-08
Mandriva	MDVSA-2008:166	2007-08-12

(Log in to post comments)