|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200610-10] ClamAV: Multiple Vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
ClamAV: Multiple Vulnerabilities
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200610-10
(ClamAV: Multiple Vulnerabilities)
Damian Put and an anonymous researcher reported a potential heap-based
buffer overflow vulnerability in rebuildpe.c responsible for the
rebuilding of an unpacked PE file, and a possible crash in chmunpack.c
in the CHM unpacker.
Impact
By sending a malicious attachment to a mail server running ClamAV, or
providing a malicious file to ClamAV through any other method, a remote
attacker could cause a Denial of Service and potentially the execution
of arbitrary code with the permissions of the user running ClamAV.
Workaround
There is no known workaround at this time.
References:
http://sourceforge.net/project/shownotes.php?release_id=455799
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4182
Solution:
All ClamAV users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.88.5"
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
