Test ID:	1.3.6.1.4.1.25623.1.0.902189
Category:	Denial of Service
Title:	ClamAV 'cli_pdf()' and 'cli_scanicon()' Denial of Service Vulnerabilities (Win
Summary:	Check for the Version of ClamAV
Description:	Overview: This host has ClamAV installed, and is prone to multiple Denial of Service vulnerabilities. Vulnerability Insight: The flaws are due to: - Errors exists within the 'cli_pdf()' function in 'libclamav/pdf.c' when processing certain 'PDF' files. This can be exploited to cause a crash. - Error exists within the 'parseicon()' function in 'libclamav/pe_icons.c' when processing 'PE' icons. This can be exploited to trigger an out-of-bounds access when reading data and potentially cause a crash. Impact: Successful exploitation will allow attackers to cause a denial of service. Impact Level: Application Affected Software/OS: ClamAV version prior to 0.96.1 (1.0.26) on Windows. Fix: Upgrade to ClamAV 0.96.1 or later, For updates refer to http://www.clamav.net References: http://secunia.com/advisories/39895 http://xforce.iss.net/xforce/xfdb/58824 http://www.vupen.com/english/advisories/2010/1214 http://git.clamav.net/gitweb?p=clamav-devel.git a=blob_plain f=ChangeLog hb=clamav-0.96.1
Cross-Ref:	BugTraq ID: 40318 BugTraq ID: 40317 Common Vulnerability Exposure (CVE) ID: CVE-2010-1639 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:110 SuSE Security Announcement: SUSE-SR:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://www.securityfocus.com/bid/40317 http://www.securitytracker.com/id?1024017 http://secunia.com/advisories/39895 http://secunia.com/advisories/43752 http://www.vupen.com/english/advisories/2010/1214 XForce ISS Database: clamav-clipdf-dos(58824) http://xforce.iss.net/xforce/xfdb/58824 Common Vulnerability Exposure (CVE) ID: CVE-2010-1640 http://www.openwall.com/lists/oss-security/2010/05/21/7 http://www.securityfocus.com/bid/40318 XForce ISS Database: clamav-parseicon-dos(58825) http://xforce.iss.net/xforce/xfdb/58825
Copyright	Copyright (c) 2010 SecPod

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: