[ GLSA 200511-04 ] ClamAV: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: ClamAV: Multiple vulnerabilities (GLSA 200511-04)
Severity: high
Exploitable: remote
Date: November 06, 2005
Updated: May 22, 2006
Bug(s): #109213
ID: 200511-04

Synopsis


ClamAV has many security flaws which make it vulnerable to remote execution
of arbitrary code and a Denial of Service.


Background


ClamAV is a GPL anti-virus toolkit, designed for integration with mail
servers to perform attachment scanning. ClamAV also provides a command
line scanner and a tool for fetching updates of the virus database.


Affected Packages

Package: app-antivirus/clamav
Vulnerable: < 0.87.1
Unaffected: >= 0.87.1
Architectures: All supported architectures


Description


ClamAV has multiple security flaws: a boundary check was performed
incorrectly in petite.c, a buffer size calculation in unfsg_133 was
incorrect in fsg.c, a possible infinite loop was fixed in tnef.c and a
possible infinite loop in cabd_find was fixed in cabd.c . In addition
to this, Marcin Owsiany reported that a corrupted DOC file causes a
segmentation fault in ClamAV.


Impact


By sending a malicious attachment to a mail server that is hooked with
ClamAV, a remote attacker could cause a Denial of Service or the
execution of arbitrary code.


Workaround


There is no known workaround at this time.


Resolution


All ClamAV users should upgrade to the latest version: