ID de Prueba:	1.3.6.1.4.1.25623.1.0.800079
Categoría:	Denial of Service
Título:	ClamAV < 0.94.2 Remote DoS Vulnerability
Resumen:	ClamAV is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: ClamAV is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The application fails to validate user input passed to cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions in special.c file. Vulnerability Impact: Successful exploitation will cause remote attackers to crash the daemon via a specially crafted JPEG file. Affected Software/OS: ClamAV before versions 0.94.2. Solution: Update to version 0.94.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5314 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 32555 http://www.securityfocus.com/bid/32555 Debian Security Information: DSA-1680 (Google Search) http://www.debian.org/security/2008/dsa-1680 https://www.exploit-db.com/exploits/7330 http://security.gentoo.org/glsa/glsa-200812-21.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:239 http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html http://www.openwall.com/lists/oss-security/2008/12/01/8 http://osvdb.org/50363 http://www.securitytracker.com/id?1021296 http://secunia.com/advisories/32926 http://secunia.com/advisories/32936 http://secunia.com/advisories/33016 http://secunia.com/advisories/33195 http://secunia.com/advisories/33317 http://secunia.com/advisories/33937 SuSE Security Announcement: SUSE-SR:2008:028 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html http://www.ubuntu.com/usn/usn-684-1 http://www.vupen.com/english/advisories/2008/3311 http://www.vupen.com/english/advisories/2009/0422 XForce ISS Database: clamav-special-dos(46985) https://exchange.xforce.ibmcloud.com/vulnerabilities/46985
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.