Debian: DSA-1281-1 Moderate: ClamAV Denial Of Service Threats

debian

April 25, 2007

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit

Topics Covered

security advisory denial of service buffer overflow remote exploit Debian attack vector ClamAV

Summary

It was discovered that a file descriptor leak in the CHM handler may
lead to denial of service.

CVE-2007-1997

It was discovered that a buffer overflow in the CAB handler may lead
to the execution of arbitrary code.

CVE-2007-2029

It was discovered that a file descriptor leak in the PDF handler may
lead to denial of service.

For the oldstable distribution (sarge) these problems have been fixed in
version 0.84-2.sarge.16.

For the stable distribution (etch) these problems have been fixed
in version 0.90.1-3etch1.

For the unstable distribution (sid) these problems have been fixed in
version 0.90.2-1.

We recommend that you upgrade your clamav packages. Packages for
the arm, sparc, m68k and mipsen architectures are not yet available.
They will be provided later.

Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use...