Test Kennung:	1.3.6.1.4.1.25623.1.0.61877
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: clamav
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: clamav clamav-devel CVE-2008-5050 Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5050 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 32207 http://www.securityfocus.com/bid/32207 Bugtraq: 20081108 ClamAV get_unicode_name() off-by-one buffer overflow (Google Search) http://www.securityfocus.com/archive/1/498169/100/0/threaded Debian Security Information: DSA-1680 (Google Search) http://www.debian.org/security/2008/dsa-1680 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065530.html http://security.gentoo.org/glsa/glsa-200812-21.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:229 http://www.securitytracker.com/id?1021159 http://secunia.com/advisories/32663 http://secunia.com/advisories/32699 http://secunia.com/advisories/32765 http://secunia.com/advisories/32872 http://secunia.com/advisories/33016 http://secunia.com/advisories/33317 http://secunia.com/advisories/33937 http://securityreason.com/securityalert/4579 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.ubuntu.com/usn/usn-672-1 http://www.vupen.com/english/advisories/2008/3085 http://www.vupen.com/english/advisories/2009/0422 XForce ISS Database: clamav-getunicodename-bo(46462) https://exchange.xforce.ibmcloud.com/vulnerabilities/46462
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.