ClamAV < 0.96.1 Multiple Vulnerabilities

medium Nessus Plugin ID 46706

Language:

Synopsis

The remote antivirus service is affected by multiple denial of service vulnerabilities.

Description

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.96.1. Such versions are reportedly affected by multiple vulnerabilities :

- An error exists within the 'cli_pdf()' function in 'libclamav/pdf.c' when processing certain PDF files.
(Bug 2016)

- An error exists within the 'parseicon()' function in 'libclamav/pe_icons.c' when processing PE icons. This can be exploited to trigger an out-of-bounds access when reading data and potentially cause a crash via a specially crafted PE file. (Bug 2031)

Solution

Upgrade to ClamAV 0.96.1 or later.

Plugin Details

Severity: Medium

ID: 46706

File Name: clamav_0_96_1.nasl

Version: 1.15

Type: remote

Family: Misc.

Published: 5/24/2010

Updated: 11/15/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:clamav:clamav

Required KB Items: Antivirus/ClamAV/version, Settings/ParanoidReport

Exploit Ease: No known exploits are available

Patch Publication Date: 5/19/2010

Vulnerability Publication Date: 5/21/2010

Reference Information

CVE: CVE-2010-1639, CVE-2010-1640

BID: 40317, 40318

Secunia: 39895

Detections

Analytics