Oval Definition:	oval:org.mitre.oval:def:8256
Revision Date: 2014-06-23 Version: 17 Title: DSA-1771 clamav -- several vulnerabilities Description: Several vulnerabilities have been discovered in the ClamAV anti-virus toolkit: Attackers can cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error. Attackers can cause a denial of service (infinite loop) via a crafted tar file that causes (1) clamd and (2) clamscan to hang. (no CVE Id yet) Attackers can cause a denial of service (crash) via a crafted EXE file that crashes the UPack unpacker. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2008-6680 CVE-2009-1270 DSA-1771 Platform(s): Debian GNU/Linux 4.0 Debian GNU/Linux 5.0 Product(s): clamav Definition Synopsis Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section clamav-docs is earlier than 0.94.dfsg.2-1lenny2 OR clamav-testfiles is earlier than 0.94.dfsg.2-1lenny2 OR clamav-base is earlier than 0.94.dfsg.2-1lenny2 OR Architecture dependent section Supported architectures section Installed architecture is s390 OR Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is armel OR Installed architecture is mips OR Installed architecture is ia64 OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is hppa AND Packages section libclamav-dev is earlier than 0.94.dfsg.2-1lenny2 OR clamav is earlier than 0.94.dfsg.2-1lenny2 OR libclamav5 is earlier than 0.94.dfsg.2-1lenny2 OR clamav-dbg is earlier than 0.94.dfsg.2-1lenny2 OR clamav-daemon is earlier than 0.94.dfsg.2-1lenny2 OR clamav-milter is earlier than 0.94.dfsg.2-1lenny2 OR clamav-freshclam is earlier than 0.94.dfsg.2-1lenny2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section clamav-docs is earlier than 0.90.1dfsg-4etch19 OR clamav-testfiles is earlier than 0.90.1dfsg-4etch19 OR clamav-base is earlier than 0.90.1dfsg-4etch19 OR Architecture dependent section Supported architectures section Installed architecture is s390 OR Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is mips OR Installed architecture is ia64 OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is hppa AND Packages section libclamav-dev is earlier than 0.90.1dfsg-4etch19 OR clamav is earlier than 0.90.1dfsg-4etch19 OR clamav-dbg is earlier than 0.90.1dfsg-4etch19 OR libclamav2 is earlier than 0.90.1dfsg-4etch19 OR clamav-daemon is earlier than 0.90.1dfsg-4etch19 OR clamav-milter is earlier than 0.90.1dfsg-4etch19 OR clamav-freshclam is earlier than 0.90.1dfsg-4etch19
BACK