ID de Prueba:	1.3.6.1.4.1.25623.1.0.61877
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: clamav
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: clamav clamav-devel CVE-2008-5050 Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5050 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 32207 http://www.securityfocus.com/bid/32207 Bugtraq: 20081108 ClamAV get_unicode_name() off-by-one buffer overflow (Google Search) http://www.securityfocus.com/archive/1/498169/100/0/threaded Debian Security Information: DSA-1680 (Google Search) http://www.debian.org/security/2008/dsa-1680 https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html http://lists.grok.org.uk/pipermail/full-disclosure/2008-November/065530.html http://security.gentoo.org/glsa/glsa-200812-21.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:229 http://www.securitytracker.com/id?1021159 http://secunia.com/advisories/32663 http://secunia.com/advisories/32699 http://secunia.com/advisories/32765 http://secunia.com/advisories/32872 http://secunia.com/advisories/33016 http://secunia.com/advisories/33317 http://secunia.com/advisories/33937 http://securityreason.com/securityalert/4579 SuSE Security Announcement: SUSE-SR:2008:026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html http://www.ubuntu.com/usn/usn-672-1 http://www.vupen.com/english/advisories/2008/3085 http://www.vupen.com/english/advisories/2009/0422 XForce ISS Database: clamav-getunicodename-bo(46462) https://exchange.xforce.ibmcloud.com/vulnerabilities/46462
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.