FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

clamav -- CHM unpacker and PE rebuilding vulnerabilities

Affected packages
clamav < 0.88.5
clamav-devel <= 20060922

Details

VuXML ID 8012a79d-5d21-11db-bb8d-00123ffe8333
Discovery 2006-10-15
Entry 2006-10-16

Secunia reports:

Two vulnerabilities have been reported in Clam AntiVirus, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) An unspecified error in the CHM unpacker in chmunpack.c can be exploited to cause a DoS.

2) An unspecified error in rebuildpe.c when rebuilding PE files after unpacking can be exploited to cause a heap-based buffer overflow.

References

URL http://lurker.clamav.net/message/20061016.015114.dc6a8930.en.html
URL http://secunia.com/advisories/22370/
URL http://sourceforge.net/project/shownotes.php?release_id=455799