Vulnerability CVE-2008-1389 - CERT Civis.Net

Vulnerability Name:

CVE-2008-1389 (CCN-44875)

Assigned:

2008-09-02

Published:

2008-09-02

Updated:

2011-03-08

Summary:

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2008-1389

Source: MISC
Type: UNKNOWN
http://int21.de/cve/CVE-2008-1389-clamav-chd.html

Source: CONFIRM
Type: UNKNOWN
http://kolab.org/security/kolab-vendor-notice-22.txt

Source: APPLE
Type: UNKNOWN
APPLE-SA-2008-10-09

Source: SUSE
Type: UNKNOWN
SUSE-SR:2008:018

Source: CCN
Type: SA31725
ClamAV CHM Processing Denial of Service

Source: SECUNIA
Type: Vendor Advisory
31725

Source: CCN
Type: SA31906
Kolab Server ClamAV Denial of Service

Source: SECUNIA
Type: UNKNOWN
31906

Source: SECUNIA
Type: UNKNOWN
31982

Source: SECUNIA
Type: UNKNOWN
32030

Source: CCN
Type: SA32222
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
32222

Source: SECUNIA
Type: UNKNOWN
32699

Source: GENTOO
Type: UNKNOWN
GLSA-200809-18

Source: CCN
Type: SECTRACK ID: 1020805
Clam AntiVirus CHM Unpacking Bug Lets Remote Users Deny Service

Source: CONFIRM
Type: Patch
http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661

Source: CCN
Type: Apple Web site
About Security Update 2008-007

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT3216

Source: CCN
Type: ClamAV Changelog, Mon Sep 1 19:27:55 CEST 2008
ClamAV Changelog

Source: CONFIRM
Type: UNKNOWN
http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog

Source: CCN
Type: Clam AntiVirus Web site
Clam AntiVirus

Source: CCN
Type: GLSA-200809-18
ClamAV: Multiple Denials of Service

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2008:189

Source: CCN
Type: OSVDB ID: 47881
ClamAV libclamav/chmunpack.c Crafted CHM File Handling DoS

Source: BID
Type: UNKNOWN
30994

Source: CCN
Type: BID-30994
ClamAV 'chmunpack.c' Invalid Memory Access Denial Of Service Vulnerability

Source: BID
Type: UNKNOWN
31681

Source: CCN
Type: BID-31681
RETIRED: Apple Mac OS X 2008-007 Multiple Security Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1020805

Source: VUPEN
Type: UNKNOWN
ADV-2008-2484

Source: VUPEN
Type: UNKNOWN
ADV-2008-2564

Source: VUPEN
Type: UNKNOWN
ADV-2008-2780

Source: XF
Type: UNKNOWN
clamav-chmunpack-dos(44875)

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-9644

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-9651

Source: SUSE
Type: SUSE-SR:2008:018
SUSE Security Summary Report

Source: CCN
Type: ClamAV Bugzilla Bug 1089
clamav chm handler: crasher bugs

Source: CONFIRM
Type: UNKNOWN
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089

Vulnerable Configuration:

Configuration 1:

cpe:/a:clam_anti-virus:clamav:0.11:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.12:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.13:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.14:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.14:pre:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc2:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc3:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc4:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.81:rc1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84:rc1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84:rc2:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86:rc1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.93.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:*:*:*:*:*:*:*:* (Version <= 0.93.3)

Configuration CCN 1:

cpe:/a:clamav:clamav:0.65:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.83:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.87:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.84:rc2:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91.2:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.92:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.92.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.15:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.20:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.21:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.22:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.23:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.24:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.51:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.52:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.53:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.54:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.60:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.60p:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.67:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.68:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.68.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.70:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.71:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.72:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.73:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.74:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.75:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.75.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc2:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc3:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc4:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.81:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.81:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.82:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.84:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.84:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.85:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.85.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.86:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.86:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.86.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.86.2:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.87.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.3:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.4:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.5:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.6:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.7:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.2:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.3:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.93:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.12:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.13:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.14:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.14:pre:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.93.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.93.3:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.2:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:x86_64:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2007.1::x86-64:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20081389	V	CVE-2008-1389	2017-09-27