Launchpad CVE tracker

CVE 2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

Related bugs and status

CVE-2008-1389 (Candidate) is related to these bugs:

Bug #304017: Recursive stack overflow in jpeg parsing code

		In	Importance	Status
304017	Recursive stack overflow in jpeg parsing code	clamav (Ubuntu)	High	Fix Released
304017	Recursive stack overflow in jpeg parsing code	clamav (Ubuntu Intrepid)	High	Fix Released
304017	Recursive stack overflow in jpeg parsing code	clamav (Ubuntu Dapper)	Undecided	Fix Released
304017	Recursive stack overflow in jpeg parsing code	clamav (Ubuntu Gutsy)	Undecided	Won't Fix
304017	Recursive stack overflow in jpeg parsing code	clamav (Ubuntu Hardy)	Undecided	Fix Released
304017	Recursive stack overflow in jpeg parsing code	clamav (Ubuntu Jaunty)	High	Fix Released

Bug #354190: Security fixes from clamav 0.95 need backport

		In	Importance	Status
354190	Security fixes from clamav 0.95 need backport	clamav (Ubuntu)	Undecided	Fix Released
354190	Security fixes from clamav 0.95 need backport	clamav (Ubuntu Dapper)	Undecided	Fix Released
354190	Security fixes from clamav 0.95 need backport	clamav (Ubuntu Gutsy)	Undecided	Won't Fix
354190	Security fixes from clamav 0.95 need backport	clamav (Ubuntu Hardy)	Undecided	Fix Released
354190	Security fixes from clamav 0.95 need backport	clamav (Ubuntu Intrepid)	Medium	Fix Released
354190	Security fixes from clamav 0.95 need backport	Hardy Backports	High	Fix Released
354190	Security fixes from clamav 0.95 need backport	Dapper Backports	Undecided	Fix Released

Bug #360502: Fix relevant security bugs from 0.95.1 in earlier releases

		In	Importance	Status
360502	Fix relevant security bugs from 0.95.1 in earlier releases	clamav (Ubuntu)	High	Fix Released
360502	Fix relevant security bugs from 0.95.1 in earlier releases	clamav (Ubuntu Dapper)	Undecided	Fix Released
360502	Fix relevant security bugs from 0.95.1 in earlier releases	clamav (Ubuntu Gutsy)	Undecided	Won't Fix
360502	Fix relevant security bugs from 0.95.1 in earlier releases	clamav (Ubuntu Hardy)	Undecided	Fix Released
360502	Fix relevant security bugs from 0.95.1 in earlier releases	clamav (Ubuntu Intrepid)	High	Fix Released
360502	Fix relevant security bugs from 0.95.1 in earlier releases	Hardy Backports	Undecided	Fix Released
360502	Fix relevant security bugs from 0.95.1 in earlier releases	Dapper Backports	Undecided	Fix Released

Bug #360919: AppArmor.d profile parsing error after update

Summary				In	Importance	Status
	360919	AppArmor.d profile parsing error after update		clamav (Ubuntu)	Undecided	Fix Released
	360919	AppArmor.d profile parsing error after update		Hardy Backports	Low	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2008-1389

References