Gentoo: GLSA-200703-03 Normal: ClamAV Denial of Service

Gentoo Linux Security Advisory GLSA 200703-03 https://security.gentoo.org/ Severity: Normal Title: ClamAV: Denial of Service Date: March 02, 2007 Bugs: #167201 ID: 200703-03

Synopsis ======= ClamAV contains two vulnerabilities allowing a Denial of Service.
Background ========= ClamAV is a GPL virus scanner.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-antivirus/clamav < 0.90 >= 0.90
========== An anonymous researcher discovered a file descriptor leak error in the processing of CAB archives and a lack of validation of the "id" parameter string used to create local files when parsing MIME headers.
Impact ===== A remote attacker can send several craft...