5

CVE-2009-1371

The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Clamav ≫ Clamav Version <= 0.95
Clamav ≫ Clamav Version0.01
Clamav ≫ Clamav Version0.02
Clamav ≫ Clamav Version0.3
Clamav ≫ Clamav Version0.03
Clamav ≫ Clamav Version0.05
Clamav ≫ Clamav Version0.8_ Updaterc3
Clamav ≫ Clamav Version0.9_rc1
Clamav ≫ Clamav Version0.10
Clamav ≫ Clamav Version0.12
Clamav ≫ Clamav Version0.13
Clamav ≫ Clamav Version0.14 Updatepre
Clamav ≫ Clamav Version0.15
Clamav ≫ Clamav Version0.20
Clamav ≫ Clamav Version0.21
Clamav ≫ Clamav Version0.22
Clamav ≫ Clamav Version0.23
Clamav ≫ Clamav Version0.24
Clamav ≫ Clamav Version0.51
Clamav ≫ Clamav Version0.52
Clamav ≫ Clamav Version0.53
Clamav ≫ Clamav Version0.54
Clamav ≫ Clamav Version0.60
Clamav ≫ Clamav Version0.60p
Clamav ≫ Clamav Version0.65
Clamav ≫ Clamav Version0.66
Clamav ≫ Clamav Version0.67
Clamav ≫ Clamav Version0.67-1
Clamav ≫ Clamav Version0.68
Clamav ≫ Clamav Version0.68.1
Clamav ≫ Clamav Version0.70
Clamav ≫ Clamav Version0.70 Updaterc
Clamav ≫ Clamav Version0.71
Clamav ≫ Clamav Version0.72
Clamav ≫ Clamav Version0.73
Clamav ≫ Clamav Version0.74
Clamav ≫ Clamav Version0.75
Clamav ≫ Clamav Version0.75.1
Clamav ≫ Clamav Version0.80
Clamav ≫ Clamav Version0.80 Updaterc4
Clamav ≫ Clamav Version0.80_rc
Clamav ≫ Clamav Version0.80_rc1
Clamav ≫ Clamav Version0.80_rc2
Clamav ≫ Clamav Version0.80_rc3
Clamav ≫ Clamav Version0.81
Clamav ≫ Clamav Version0.81_rc1
Clamav ≫ Clamav Version0.82
Clamav ≫ Clamav Version0.83
Clamav ≫ Clamav Version0.84
Clamav ≫ Clamav Version0.84_rc1
Clamav ≫ Clamav Version0.84_rc2
Clamav ≫ Clamav Version0.85
Clamav ≫ Clamav Version0.85.1
Clamav ≫ Clamav Version0.86
Clamav ≫ Clamav Version0.86.1
Clamav ≫ Clamav Version0.86.2
Clamav ≫ Clamav Version0.86_rc1
Clamav ≫ Clamav Version0.87
Clamav ≫ Clamav Version0.87.1
Clamav ≫ Clamav Version0.88
Clamav ≫ Clamav Version0.88.1
Clamav ≫ Clamav Version0.88.2
Clamav ≫ Clamav Version0.88.3
Clamav ≫ Clamav Version0.88.4
Clamav ≫ Clamav Version0.88.5
Clamav ≫ Clamav Version0.88.6
Clamav ≫ Clamav Version0.88.7
Clamav ≫ Clamav Version0.88.7_p0
Clamav ≫ Clamav Version0.88.7_p1
Clamav ≫ Clamav Version0.90
Clamav ≫ Clamav Version0.90.1
Clamav ≫ Clamav Version0.90.1_p0
Clamav ≫ Clamav Version0.90.2
Clamav ≫ Clamav Version0.90.2_p0
Clamav ≫ Clamav Version0.90.3
Clamav ≫ Clamav Version0.90.3_p0
Clamav ≫ Clamav Version0.90.3_p1
Clamav ≫ Clamav Version0.90_rc1
Clamav ≫ Clamav Version0.90_rc1.1
Clamav ≫ Clamav Version0.90_rc2
Clamav ≫ Clamav Version0.90_rc3
Clamav ≫ Clamav Version0.91
Clamav ≫ Clamav Version0.91.1
Clamav ≫ Clamav Version0.91.2
Clamav ≫ Clamav Version0.91.2_p0
Clamav ≫ Clamav Version0.91_rc1
Clamav ≫ Clamav Version0.91_rc2
Clamav ≫ Clamav Version0.92
Clamav ≫ Clamav Version0.92.1
Clamav ≫ Clamav Version0.92_p0
Clamav ≫ Clamav Version0.93
Clamav ≫ Clamav Version0.93.1
Clamav ≫ Clamav Version0.93.2
Clamav ≫ Clamav Version0.93.3
Clamav ≫ Clamav Version0.94
Clamav ≫ Clamav Version0.94.1
Clamav ≫ Clamav Version0.94.2
Clamav ≫ Clamav Version0.95 Updatesrc1
Clamav ≫ Clamav Version0.95 Updatesrc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.42% 0.874
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
http://secunia.com/advisories/36701
http://support.apple.com/kb/HT3865
http://www.mandriva.com/security/advisories?name=MDVSA-2009:097
http://secunia.com/advisories/34716
http://www.debian.org/security/2009/dsa-1771
http://osvdb.org/53602
http://secunia.com/advisories/34612
Vendor Advisory
http://secunia.com/advisories/34654
Vendor Advisory
http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032
http://www.securityfocus.com/bid/34446
Patch
http://www.securitytracker.com/id?1022028
http://www.ubuntu.com/usn/usn-756-1
http://www.vupen.com/english/advisories/2009/0985
Patch
Vendor Advisory
https://launchpad.net/bugs/360502
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1552