The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. 

This update contains several security fixes for a number of programs.

This clamav version update to 0.91.1 fixes among other things the long startup time of version 0.90.3 as well as a possibilty to crash clamav with specially crafted rar archives. (CVE-2007-3725)

This clamav version update to 0.91.1 fixes among other things the long startup time of version 0.90.3 as well as a possibilty to crash clamav with specially crafted rar archives (CVE-2007-3725).

The remote host is affected by the vulnerability described in GLSA-200708-04 (ClamAV: Denial of Service)

    Metaeye Security Group reported a NULL pointer dereference in ClamAV     when processing RAR archives.
  Impact :

    A remote attacker could send a specially crafted RAR archive to the     clamd daemon, resulting in a crash and a Denial of Service.
  Workaround :

    There is no known workaround at this time.

A vulnerability in the RAR VM in ClamAV allowed user-assisted remote attackers to cause a crash via a crafted RAR archive which resulted in a NULL pointer dereference.

Other bugs have also been corrected in 0.91.1 which is being provided with this update.

A NULL pointer dereference has been discovered in the RAR VM of Clam Antivirus (ClamAV) which allows user-assisted remote attackers to cause a denial of service via a specially crafted RAR archives.

We are currently unable to provide fixed packages for the MIPS architectures. Those packages will be installed in the security archive when they become available.

ID	Name	Product	Family	Severity
31605	Mac OS X Multiple Vulnerabilities (Security Update 2008-002)	Nessus	MacOS X Local Security Checks	critical
29403	SuSE 10 Security Update : clamav (ZYPP Patch Number 3902)	Nessus	SuSE Local Security Checks	medium
27184	openSUSE 10 Security Update : clamav (clamav-3901)	Nessus	SuSE Local Security Checks	medium
25869	GLSA-200708-04 : ClamAV: Denial of Service	Nessus	Gentoo Local Security Checks	medium
25796	Mandrake Linux Security Advisory : clamav (MDKSA-2007:150)	Nessus	Mandriva Local Security Checks	medium
25782	Debian DSA-1340-1 : clamav - NULL pointer dereference	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2007-3725

medium

Tenable Plugins

critical

medium

medium

medium

medium

medium