Test Kennung:	1.3.6.1.4.1.25623.1.0.902189
Kategorie:	Denial of Service
Titel:	ClamAV < 0.96.1 'cli_pdf()' and 'cli_scanicon()' DoS Vulnerabilities - Windows
Zusammenfassung:	ClamAV is prone to multiple denial of service (DoS) vulnerabilities.
Beschreibung:	Summary: ClamAV is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: The flaws are due to: - Errors exist within the 'cli_pdf()' function in 'libclamav/pdf.c' when processing certain 'PDF' files. This can be exploited to cause a crash. - Errors exist within the 'parseicon()' function in 'libclamav/pe_icons.c' when processing 'PE' icons. This can be exploited to trigger an out-of-bounds access when reading data and potentially cause a crash. Vulnerability Impact: Successful exploitation will allow attackers to cause a denial of service. Affected Software/OS: ClamAV version prior to 0.96.1 (1.0.26). Solution: Update to version 0.96.1 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1639 1024017 http://www.securitytracker.com/id?1024017 39895 http://secunia.com/advisories/39895 40317 http://www.securityfocus.com/bid/40317 43752 http://secunia.com/advisories/43752 ADV-2010-1214 http://www.vupen.com/english/advisories/2010/1214 FEDORA-2011-2741 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html FEDORA-2011-2743 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html MDVSA-2010:110 http://www.mandriva.com/security/advisories?name=MDVSA-2010:110 SUSE-SR:2010:014 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html clamav-clipdf-dos(58824) https://exchange.xforce.ibmcloud.com/vulnerabilities/58824 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=f0eb394501ec21b9fe67f36cbf5db788711d4236#patch2 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016 Common Vulnerability Exposure (CVE) ID: CVE-2010-1640 40318 http://www.securityfocus.com/bid/40318 [oss-security] 20100521 CVE Request: off by one DoS in pe_icons.c http://www.openwall.com/lists/oss-security/2010/05/21/7 clamav-parseicon-dos(58825) https://exchange.xforce.ibmcloud.com/vulnerabilities/58825 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.1 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blobdiff%3Bf=libclamav/pe_icons.c%3Bh=3f1bc5be69d0f9d84e576814d1a3cc6f40c4ff2c%3Bhp=39a714f05968f9e929576bf171dd0eb58bf06bef%3Bhb=7f0e3bbf77382d9782e0189bf80f5f59a95779b3%3Bhpb=f0eb394501ec21b9fe67f36cbf5db788711d4236 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2031
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.