Test ID:	1.3.6.1.4.1.25623.1.0.58379
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2007:098 (clamav)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to clamav announced via advisory MDKSA-2007:098. iDefense discovered a stack-based overflow in ClamAV when processing negative values in .cab files. As well, multiple file descriptor leaks were also reported and fixed in chmunpack.c, pdf.c, and dblock.c. This update provides ClamAV 0.90.2 which corrects these problems and provides new functionality. Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:098 Risk factor : High CVSS Score: 7.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1745 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 23473 http://www.securityfocus.com/bid/23473 Debian Security Information: DSA-1281 (Google Search) http://www.debian.org/security/2007/dsa-1281 http://security.gentoo.org/glsa/glsa-200704-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:098 http://osvdb.org/34913 http://secunia.com/advisories/24891 http://secunia.com/advisories/24920 http://secunia.com/advisories/24946 http://secunia.com/advisories/24996 http://secunia.com/advisories/25022 http://secunia.com/advisories/25028 http://secunia.com/advisories/25189 http://secunia.com/advisories/29420 SuSE Security Announcement: SUSE-SA:2007:026 (Google Search) http://www.novell.com/linux/security/advisories/2007_26_clamav.html http://www.trustix.org/errata/2007/0013/ http://www.vupen.com/english/advisories/2007/1378 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: clamav-chmdecompressstream-dos(33636) https://exchange.xforce.ibmcloud.com/vulnerabilities/33636 Common Vulnerability Exposure (CVE) ID: CVE-2007-1997 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=513 http://www.securitytracker.com/id?1017921 XForce ISS Database: clamav-cabunstore-cabextract-bo(33637) https://exchange.xforce.ibmcloud.com/vulnerabilities/33637 Common Vulnerability Exposure (CVE) ID: CVE-2007-2029 BugTraq ID: 23656 http://www.securityfocus.com/bid/23656 http://osvdb.org/34916 XForce ISS Database: clamav-pdfhandler-dos(34083) https://exchange.xforce.ibmcloud.com/vulnerabilities/34083
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.