According to its version, the clamd antivirus daemon on the remote host is earlier than 0.94.2. There is a recursive stack overflow involving the JPEG parsing code in such versions. A remote attacker may be able to leverage this issue to cause the application to recursively scan a specially crafted JPEG, which will eventually cause it to crash.

バージョンによると、リモートホストのclamdウイルス対策デーモンのバージョンは 0.94.2 より前です。このようなバージョンには、JPEG解析コードに関連する再帰スタックオーバーフローがあります。リモートの攻撃者がこの問題を悪用し、アプリケーションが特別に細工されたJPEGを再帰的にスキャンするようにさせて、最終的にアプリケーションのクラッシュを引き起こせる場合があります。

根据其版本，远程主机上的 clamd 防病毒后台程序低于 0.94.2。此类版本中存在一个涉及 JPEG 解析代码的递归堆栈溢出漏洞。远程攻击者可能会利用此问题导致应用程序以递归方式扫描特别构建的 JPEG，并最终导致其崩溃。

根據其版本，遠端主機上的 clamd 防毒程序版本比 0.94.2 舊。這些版本中存在涉及 JPEG 剖析程式碼的遞回堆疊溢位問題。遠端攻擊者或可利用此問題造成應用程式以遞回方式掃描特製的 JPEG，最終導致應用程式損毀。

Specially crafted jpg files could crash the clamd daemon of clamav.
(CVE-2008-5314)

Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow and potentially arbitrary code execution (CVE-2008-5050 ).

Ilja van Sprundel discovered that ClamAV contains a denial of service condition in its JPEG file processing because it does not limit the recursion depth when processing JPEG thumbnails (CVE-2008-5314 ).

The remote host is affected by the vulnerability described in GLSA-200812-21 (ClamAV: Multiple vulnerabilities)

    Moritz Jodeit reported an off-by-one error within the     get_unicode_name() function in libclamav/vba_extract.c when processing     VBA project files (CVE-2008-5050). Ilja van Sprundel reported an     infinite recursion error within the cli_check_jpeg_exploit() function     in libclamav/special.c when processing JPEG files (CVE-2008-5314).
  Impact :

    A remote attacker could send a specially crafted VBA or JPEG file to     the clamd daemon, possibly resulting in the remote execution of     arbitrary code with the privileges of the user running the application     or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

Ilja van Sprundel found that ClamAV contained a denial of service vulnerability in how it handled processing JPEG files, due to it not limiting the recursion depth when processing JPEG thumbnails (CVE-2008-5314).

Other bugs have also been corrected in 0.94.2 which is being provided with this update.

Ilja van Sprundel discovered that ClamAV did not handle recursive JPEG information. If a remote attacker sent a specially crafted JPEG file, ClamAV would crash, leading to a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-001 applied.

This security update contains fixes for the following products :

  - AFP Server
  - Apple Pixlet Video
  - CarbonCore
  - CFNetwork
  - Certificate Assistant
  - ClamAV
  - CoreText
  - CUPS
  - DS Tools
  - fetchmail
  - Folder Manager
  - FSEvents
  - Network Time
  - perl
  - Printing
  - python
  - Remote Apple Events
  - Safari RSS
  - servermgrd
  - SMB
  - SquirrelMail
  - X11
  - XTerm

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.94.2.  There is a recursive stack overflow involving the JPEG parsing code in such versions.  A remote attacker may be able to leverage this issue to cause the application to recursively scan a specially crafted JPEG, which will eventually cause it to crash. 

ID	名稱	產品	系列	已發布	已更新	嚴重性
35009	ClamAV < 0.94.2 cli_check_jpeg_exploit() Malformed JPEG File DoS	Nessus	Gain a shell remotely	2008/12/3	2018/7/6	medium
35009	ClamAV < 0.94.2のcli_check_jpeg_exploit（）の無効な形式のJPEGファイルのDoS	Nessus	Gain a shell remotely	2008/12/3	2018/7/6	medium
35009	ClamAV < 0.94.2 cli_check_jpeg_exploit() 畸形 JPEG 文件 DoS	Nessus	Gain a shell remotely	2008/12/3	2018/7/6	medium
35009	ClamAV < 0.94.2 cli_check_jpeg_exploit() 格式錯誤的 JPEG 檔案 DoS	Nessus	Gain a shell remotely	2008/12/3	2018/7/6	medium
35103	openSUSE 10 Security Update : clamav (clamav-5843)	Nessus	SuSE Local Security Checks	2008/12/15	2021/1/14	medium
41262	SuSE9 Security Update : ClamAV (YOU Patch Number 12318)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
35033	Debian DSA-1680-1 : clamav - buffer overflow, stack consumption	Nessus	Debian Local Security Checks	2008/12/4	2021/1/4	high
35268	GLSA-200812-21 : ClamAV: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/12/26	2021/1/6	high
39933	openSUSE Security Update : clamav (clamav-357)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	medium
41485	SuSE 10 Security Update : ClamAV (ZYPP Patch Number 5842)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium
37414	Mandriva Linux Security Advisory : clamav (MDVSA-2008:239)	Nessus	Mandriva Local Security Checks	2009/4/23	2021/1/6	medium
37977	Ubuntu 8.10 : clamav vulnerability (USN-684-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	medium
35684	Mac OS X Multiple Vulnerabilities (Security Update 2009-001)	Nessus	MacOS X Local Security Checks	2009/2/13	2024/5/28	critical
4776	ClamAV < 0.94.2 cli_check_jpeg_exploit() Malformed JPEG File DoS (deprecated)	Nessus Network Monitor	Web Clients	2008/12/2	2019/3/6	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

high

high

medium

medium

medium

medium

critical

medium