CERTA-2007-AVI-174
Vulnerability from certfr_avis - Published: 2007-04-13 - Updated: 2007-04-13
Plusieurs vulnérabilités, dont une de type débordement de mémoire, affectent ClamAV.
Description
Une nouvelle version de ClamAV a été publiée. Celle-ci corrige plusieurs vulnérabilités, dont une de type débordement de mémoire affectant le fichier libclamav/cab.c. L'impact réel de ces vulnérabilités n'est pas connu.
Solution
Installer la version 0.90.2 (voir Documentation).
ClamAV versions 0.90.1 et antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003e\u003cSPAN class=\"textit\"\u003eClamAV\u003c/SPAN\u003e versions 0.90.1 et ant\u00e9rieures.\u003c/P\u003e",
"content": "## Description\n\nUne nouvelle version de ClamAV a \u00e9t\u00e9 publi\u00e9e. Celle-ci corrige plusieurs\nvuln\u00e9rabilit\u00e9s, dont une de type d\u00e9bordement de m\u00e9moire affectant le\nfichier libclamav/cab.c. L\u0027impact r\u00e9el de ces vuln\u00e9rabilit\u00e9s n\u0027est pas\nconnu.\n\n## Solution\n\nInstaller la version 0.90.2 (voir Documentation).\n",
"cves": [],
"initial_release_date": "2007-04-13T00:00:00",
"last_revision_date": "2007-04-13T00:00:00",
"links": [
{
"title": "Version 0.90.2 de ClamAV :",
"url": "http://sourceforge.net/project/showfiles.php?group_id=86638"
}
],
"reference": "CERTA-2007-AVI-174",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2007-04-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s, dont une de type d\u00e9bordement de m\u00e9moire,\naffectent \u003cspan class=\"textit\"\u003eClamAV\u003c/span\u003e.\n",
"title": "Vuln\u00e9rabilit\u00e9s dans ClamAV",
"vendor_advisories": [
{
"published_at": null,
"title": "Notes de version 0.90.2 de ClamAV",
"url": "http://sourceforge.net/project/shownotes.php?release_id=500765"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…