Description (CNA)
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.novell.com/linux/security/advisories/2005_18_sr.html
- http://security.gentoo.org/glsa/glsa-200507-25.xml
- http://www.osvdb.org/18258
- http://secunia.com/advisories/16250
- http://secunia.com/advisories/16180
- http://marc.info/?l=bugtraq&m=112230864412932&w=2
- http://www.osvdb.org/18259
- http://secunia.com/advisories/16229
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987
- http://secunia.com/advisories/16296
- http://www.osvdb.org/18257
- http://secunia.com/advisories/16458
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21555
- http://sourceforge.net/project/shownotes.php?release_id=344514
- http://www.securityfocus.com/bid/14359
ADP enrichment
No English description supplied.
- http://www.novell.com/linux/security/advisories/2005_18_sr.html
- http://security.gentoo.org/glsa/glsa-200507-25.xml
- http://www.osvdb.org/18258
- http://secunia.com/advisories/16250
- http://secunia.com/advisories/16180
- http://marc.info/?l=bugtraq&m=112230864412932&w=2
- http://www.osvdb.org/18259
- http://secunia.com/advisories/16229
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987
- http://secunia.com/advisories/16296
- http://www.osvdb.org/18257
- http://secunia.com/advisories/16458
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21555
- http://sourceforge.net/project/shownotes.php?release_id=344514
- http://www.securityfocus.com/bid/14359