diff options
| author | simon <simon@FreeBSD.org> | 2005-09-24 16:31:46 +0800 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2005-09-24 16:31:46 +0800 |
| commit | 86a648f717838227d876e0df6d539d5d678e5e83 (patch) | |
| tree | 214373934c60097405f5c2eab71a192e9cd5d1d8 /security | |
| parent | fe9d7d9fa61d38b6112a88a61391a5f41235b535 (diff) | |
| download | freebsd-ports-gnome-86a648f717838227d876e0df6d539d5d678e5e83.tar.gz freebsd-ports-gnome-86a648f717838227d876e0df6d539d5d678e5e83.tar.zst freebsd-ports-gnome-86a648f717838227d876e0df6d539d5d678e5e83.zip | |
Document clamav -- arbitrary code execution and DoS vulnerabilities.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 0bb04bc5c4f1..0675fdd7d2f7 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,45 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="271498a9-2cd4-11da-a263-0001020eed82"> + <topic>clamav -- arbitrary code execution and DoS + vulnerabilities</topic> + <affects> + <package> + <name>clamav</name> + <range><lt>0.87</lt></range> + </package> + <package> + <name>clamav-devel</name> + <range><lt>20050917</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Gentoo Linux Security Advisory reports:</p> + <blockquote cite="http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml"> + <p>Clam AntiVirus is vulnerable to a buffer overflow in + "libclamav/upx.c" when processing malformed UPX-packed + executables. It can also be sent into an infinite loop in + "libclamav/fsg.c" when processing specially-crafted + FSG-packed executables.</p> + <p>By sending a specially-crafted file an attacker could + execute arbitrary code with the permissions of the user + running Clam AntiVirus, or cause a Denial of Service.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CAN-2005-2919</cvename> + <cvename>CAN-2005-2920</cvename> + <url>http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml</url> + </references> + <dates> + <discovery>2005-09-16</discovery> + <entry>2005-09-24</entry> + </dates> + </vuln> + <vuln vid="8f5dd74b-2c61-11da-a263-0001020eed82"> <topic>firefox & mozilla -- multiple vulnerabilities</topic> <affects> |