bugtraq - Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 11 Jul 2007 20:43:03 +0530
From: Metaeye SG <contact@...aeye.org>
To: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk,
	news@...uriteam.com
Subject: Advisory - Clam AntiVirus RAR File Handling  Denial Of Service Vulnerability.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Vendor
- ------
Clam Antivirus (http://www.clamav.net)

Product
- -------
Clamav (libclamav)

Versions Affected
- -----------------
All before 0.91

Severity
- --------
Moderate

Issue
- -----
Clamav crashes due to processing of standard filters in RAR VM, while processing a
corrupted RAR file. Processing the corrupted file results in a null pointer deference.

Impact
- ------
Processing the corrupted file will result in crashing of clamscan application and
clamd daemon.

Fix
- ---
Upgrade to version 0.91.

PoC
- ---
http://www.metaeye.org/codes/corrupted.rar

Vendor Status
- -------------
Reported: 25/06/2007
Fixed:    11/07/2007


References
- ----------
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=555
http://www.metaeye.org/advisories/54



Metaeye SG // http://www.metaeye.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGlPN/gHlN5ncUR6wRAo1AAJ9dNI51Y4t5BRG3aqIUHPih8cJQ7ACfVrW1
21o5Oadk6A7OVGhdzJph2gk=
=YuBi
-----END PGP SIGNATURE-----