PT-2005-3359 · Clamav · Libclamav+1

Alex Wheeler + 1 · Publicado 2005-08-03 · Atualizado 2017-07-11 · CVE-2005-2450

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) versions 0.86.1 and earlier

Description The issue is related to multiple integer overflows in file format processors for TNEF, CHM, or FSG files in libclamav. This allows remote attackers to gain privileges via a crafted e-mail message.

Recommendations For Clam AntiVirus (ClamAV) versions 0.86.1 and earlier, update to a version later than 0.86.1 to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-2450

DSA-776-1

DTSA-3-1

Produtos afetados

Clam Antivirus

Libclamav

Referências · 19

• http://novell.com/linux/security/advisories/2005_18_sr.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-2450 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=344514 · Correção
• http://security.gentoo.org/glsa/glsa-200507-25.xml · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987 · Aviso do Fabricante
• http://secunia.com/advisories/16296 · Nota
• http://osvdb.org/18258 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2450 · Aviso do Fabricante
• http://secunia.com/advisories/16180 · Nota
• http://osvdb.org/18257 · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-2450 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=112230864412932&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2450 · Nota de Segurança
• http://secunia.com/advisories/16458 · Nota
• http://osvdb.org/18259 · Nota