This clamav version update to 0.91.1 fixes among other things the long startup time of version 0.90.3 as well as a possibilty to crash clamav with specially crafted rar archives. (CVE-2007-3725)

This clamav version update to 0.91.1 fixes among other things the long startup time of version 0.90.3 as well as a possibilty to crash clamav with specially crafted rar archives (CVE-2007-3725).

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. 

This update contains several security fixes for a number of programs.

A vulnerability in the RAR VM in ClamAV allowed user-assisted remote attackers to cause a crash via a crafted RAR archive which resulted in a NULL pointer dereference.

Other bugs have also been corrected in 0.91.1 which is being provided with this update.

A NULL pointer dereference has been discovered in the RAR VM of Clam Antivirus (ClamAV) which allows user-assisted remote attackers to cause a denial of service via a specially crafted RAR archives.

We are currently unable to provide fixed packages for the MIPS architectures. Those packages will be installed in the security archive when they become available.

The remote host is affected by the vulnerability described in GLSA-200708-04 (ClamAV: Denial of Service)

    Metaeye Security Group reported a NULL pointer dereference in ClamAV     when processing RAR archives.
  Impact :

    A remote attacker could send a specially crafted RAR archive to the     clamd daemon, resulting in a crash and a Denial of Service.
  Workaround :

    There is no known workaround at this time.

ID	名稱	產品	系列	已發布	已更新	嚴重性
29403	SuSE 10 Security Update : clamav (ZYPP Patch Number 3902)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	medium
27184	openSUSE 10 Security Update : clamav (clamav-3901)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
31605	Mac OS X Multiple Vulnerabilities (Security Update 2008-002)	Nessus	MacOS X Local Security Checks	2008/3/19	2018/7/14	critical
25796	Mandrake Linux Security Advisory : clamav (MDKSA-2007:150)	Nessus	Mandriva Local Security Checks	2007/7/27	2021/1/6	medium
25782	Debian DSA-1340-1 : clamav - NULL pointer dereference	Nessus	Debian Local Security Checks	2007/7/27	2021/1/4	medium
25869	GLSA-200708-04 : ClamAV: Denial of Service	Nessus	Gentoo Local Security Checks	2007/8/13	2021/1/6	medium

偵測

搜尋 Plugin

medium

medium

critical

medium

medium

medium