|
|
| |
Clam AntiVirus is "a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning)".
The following vulnerability allows remote attackers to execute arbitrary code on vulnerable ClamAV installations. |
| |
Credit:
The original article can be found at: http://www.zerodayinitiative.com/advisories/ZDI-05-002.html
|
| |
Vulnerable Systems:
* Clam AntiVirus versions 0.80 through 0.87
Immune Systems:
* Clam AntiVirus versions 0.87.1 available from here
This specific flaw exists within libclamav/fsg.c during the unpacking of executable files compressed with FSG v1.33. Due to invalid bounds checking when copying user-supplied data to heap allocated memory, an exploitable memory corruption condition is created. The unpacking algorithm for other versions of FSG is not affected.
Disclosure Timeline:
24.10.05 - Vulnerability reported to vendor
24.10.05 - Digital Vaccine released to TippingPoint customers
25.10.05 - Vulnerability information provided to ZDI security partners
04.11.05 - Public release of advisory
|
|
|
