[clamav] remote vulnerabilities in versions before 0.92
Bug #180285 reported by
disabled.user
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
clamav (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: clamav
References:
DSA DSA-1435-1 (http://
Quoting:
"Several remote vulnerabilities have been discovered in the Clam
anti-virus toolkit. The Common Vulnerabilities and Exposures project
identifies the following problems:
CVE-2007-6335
It was discovered that an integer overflow in the decompression code
for MEW archives may lead to the execution of arbitrary code.
CVE-2007-6336
It was discovered that on off-by-one in the MS-ZIP decompression
code may lead to the execution of arbitrary code."
To post a comment you must log in.