clamav: multiple vulnerabilities
| Package(s): | clamav | CVE #(s): | CVE-2008-6680 CVE-2009-1270 | ||||||||||||||||
| Created: | April 16, 2009 | Updated: | December 8, 2009 | ||||||||||||||||
| Description: | Clamav has three vulnerabilities, from the Debian alert:
CVE-2008-6680 Attackers can cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error. CVE-2009-1270 Attackers can cause a denial of service (infinite loop) via a crafted tar file that causes (1) clamd and (2) clamscan to hang. (no CVE Id yet) Attackers can cause a denial of service (crash) via a crafted EXE file that crashes the UPack unpacker. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||