PT-2005-4114 · Clam Antivirus · Clamav

Publicado 2005-11-05 · Atualizado 2024-06-15 · CVE-2005-3303

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions 0.80 through 0.87

Description The issue allows remote attackers to cause memory corruption and execute arbitrary code via a crafted FSG 1.33 file. This is due to a problem in the FSG unpacker (fsg.c) in Clam AntiVirus.

Recommendations For ClamAV versions 0.80 through 0.87, update to a version that contains a fix for this issue to prevent memory corruption and arbitrary code execution.

Correção

Identificadores relacionados

CVE-2005-3303

DSA-887-1

DTSA-21-1

OPENSUSE-SU-2024:10685-1

Produtos afetados

Clamav

Referências · 77

• https://suse.com/security/cve/CVE-2017-12374 · Nota
• http://securityreason.com/securityalert/146 · Nota
• https://suse.com/security/cve/CVE-2007-0897 · Nota
• https://suse.com/security/cve/CVE-2017-6419 · Nota
• http://secunia.com/advisories/17434 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-3303 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-1997 · Nota
• https://suse.com/security/cve/CVE-2007-0898 · Nota
• http://securitytracker.com/id?1015154 · Nota
• https://suse.com/security/cve/CVE-2008-2713 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-4182 · Nota
• https://suse.com/security/cve/CVE-2017-12377 · Nota
• https://suse.com/security/cve/CVE-2007-6596 · Nota
• https://suse.com/security/cve/CVE-2018-1000085 · Nota