Test ID:	1.3.6.1.4.1.25623.1.0.69254
Category:	Fedora Local Security Checks
Title:	Fedora Core 15 FEDORA-2011-2732 (clamav)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to clamav announced via advisory FEDORA-2011-2732. References: [ 1 ] Bug #595318 - CVE-2010-1639 Clam AntiVirus: Heap-based overflow, when processing malicious PDF file(s) https://bugzilla.redhat.com/show_bug.cgi?id=595318 [ 2 ] Bug #679787 - CVE-2011-1003 clamav: Double free error by reading VBA project strings https://bugzilla.redhat.com/show_bug.cgi?id=679787 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update clamav' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-2732 Risk factor : High CVSS Score: 6.8
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1639 1024017 http://www.securitytracker.com/id?1024017 39895 http://secunia.com/advisories/39895 40317 http://www.securityfocus.com/bid/40317 43752 http://secunia.com/advisories/43752 ADV-2010-1214 http://www.vupen.com/english/advisories/2010/1214 FEDORA-2011-2741 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html FEDORA-2011-2743 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html MDVSA-2010:110 http://www.mandriva.com/security/advisories?name=MDVSA-2010:110 SUSE-SR:2010:014 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html clamav-clipdf-dos(58824) https://exchange.xforce.ibmcloud.com/vulnerabilities/58824 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=f0eb394501ec21b9fe67f36cbf5db788711d4236#patch2 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016 Common Vulnerability Exposure (CVE) ID: CVE-2011-1003 1025100 http://securitytracker.com/id?1025100 43392 http://secunia.com/advisories/43392 43498 http://secunia.com/advisories/43498 46470 http://www.securityfocus.com/bid/46470 70937 http://osvdb.org/70937 ADV-2011-0453 http://www.vupen.com/english/advisories/2011/0453 ADV-2011-0458 http://www.vupen.com/english/advisories/2011/0458 ADV-2011-0523 http://www.vupen.com/english/advisories/2011/0523 MDVA-2011:007 http://www.mandriva.com/en/support/security/advisories/?name=MDVA-2011:007 SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html USN-1076-1 http://www.ubuntu.com/usn/USN-1076-1 [oss-security] 20110221 Re: clamav 0.97 http://openwall.com/lists/oss-security/2011/02/21/4 [oss-security] 20110221 clamav 0.97 http://openwall.com/lists/oss-security/2011/02/21/1 clamav-vbareadprojectstrings-dos(65544) https://exchange.xforce.ibmcloud.com/vulnerabilities/65544 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob%3Bf=ChangeLog%3Bhb=clamav-0.97 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=d21fb8d975f8c9688894a8cef4d50d977022e09f https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2486
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.