7.5

CVE-2010-4261

EPSS 8.53%
Veröffentlicht 07.12.2010 13:53:29
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.  NOTE: some of these details are obtained from third party information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 26

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Clamav ≫ Clamav Version <= 0.96.4

Clamav ≫ Clamav Version0.01

Clamav ≫ Clamav Version0.02

Clamav ≫ Clamav Version0.3

Clamav ≫ Clamav Version0.03

Clamav ≫ Clamav Version0.05

Clamav ≫ Clamav Version0.8 Updaterc3

Clamav ≫ Clamav Version0.9 Updaterc1

Clamav ≫ Clamav Version0.10

Clamav ≫ Clamav Version0.12

Clamav ≫ Clamav Version0.13

Clamav ≫ Clamav Version0.14

Clamav ≫ Clamav Version0.14 Updatepre

Clamav ≫ Clamav Version0.15

Clamav ≫ Clamav Version0.20

Clamav ≫ Clamav Version0.21

Clamav ≫ Clamav Version0.22

Clamav ≫ Clamav Version0.23

Clamav ≫ Clamav Version0.24

Clamav ≫ Clamav Version0.51

Clamav ≫ Clamav Version0.52

Clamav ≫ Clamav Version0.53

Clamav ≫ Clamav Version0.54

Clamav ≫ Clamav Version0.60

Clamav ≫ Clamav Version0.60p

Clamav ≫ Clamav Version0.65

Clamav ≫ Clamav Version0.66

Clamav ≫ Clamav Version0.67

Clamav ≫ Clamav Version0.67-1

Clamav ≫ Clamav Version0.68

Clamav ≫ Clamav Version0.68.1

Clamav ≫ Clamav Version0.70

Clamav ≫ Clamav Version0.70 Updaterc

Clamav ≫ Clamav Version0.71

Clamav ≫ Clamav Version0.72

Clamav ≫ Clamav Version0.73

Clamav ≫ Clamav Version0.74

Clamav ≫ Clamav Version0.75

Clamav ≫ Clamav Version0.75.1

Clamav ≫ Clamav Version0.80

Clamav ≫ Clamav Version0.80 Updaterc

Clamav ≫ Clamav Version0.80 Updaterc1

Clamav ≫ Clamav Version0.80 Updaterc2

Clamav ≫ Clamav Version0.80 Updaterc3

Clamav ≫ Clamav Version0.80 Updaterc4

Clamav ≫ Clamav Version0.80_rc

Clamav ≫ Clamav Version0.81

Clamav ≫ Clamav Version0.81 Updaterc1

Clamav ≫ Clamav Version0.82

Clamav ≫ Clamav Version0.83

Clamav ≫ Clamav Version0.84

Clamav ≫ Clamav Version0.84 Updaterc1

Clamav ≫ Clamav Version0.84 Updaterc2

Clamav ≫ Clamav Version0.85

Clamav ≫ Clamav Version0.85.1

Clamav ≫ Clamav Version0.86

Clamav ≫ Clamav Version0.86 Updaterc1

Clamav ≫ Clamav Version0.86.1

Clamav ≫ Clamav Version0.86.2

Clamav ≫ Clamav Version0.87

Clamav ≫ Clamav Version0.87.1

Clamav ≫ Clamav Version0.88

Clamav ≫ Clamav Version0.88.1

Clamav ≫ Clamav Version0.88.2

Clamav ≫ Clamav Version0.88.3

Clamav ≫ Clamav Version0.88.4

Clamav ≫ Clamav Version0.88.5

Clamav ≫ Clamav Version0.88.6

Clamav ≫ Clamav Version0.88.7

Clamav ≫ Clamav Version0.88.7_p0

Clamav ≫ Clamav Version0.88.7_p1

Clamav ≫ Clamav Version0.90

Clamav ≫ Clamav Version0.90 Updaterc1

Clamav ≫ Clamav Version0.90 Updaterc1.1

Clamav ≫ Clamav Version0.90 Updaterc2

Clamav ≫ Clamav Version0.90 Updaterc3

Clamav ≫ Clamav Version0.90.1

Clamav ≫ Clamav Version0.90.1_p0

Clamav ≫ Clamav Version0.90.2

Clamav ≫ Clamav Version0.90.2_p0

Clamav ≫ Clamav Version0.90.3

Clamav ≫ Clamav Version0.90.3_p0

Clamav ≫ Clamav Version0.90.3_p1

Clamav ≫ Clamav Version0.91

Clamav ≫ Clamav Version0.91 Updaterc1

Clamav ≫ Clamav Version0.91 Updaterc2

Clamav ≫ Clamav Version0.91.1

Clamav ≫ Clamav Version0.91.2

Clamav ≫ Clamav Version0.91.2_p0

Clamav ≫ Clamav Version0.92

Clamav ≫ Clamav Version0.92.1

Clamav ≫ Clamav Version0.92_p0

Clamav ≫ Clamav Version0.93

Clamav ≫ Clamav Version0.93.1

Clamav ≫ Clamav Version0.93.2

Clamav ≫ Clamav Version0.93.3

Clamav ≫ Clamav Version0.94

Clamav ≫ Clamav Version0.94.1

Clamav ≫ Clamav Version0.94.2

Clamav ≫ Clamav Version0.95

Clamav ≫ Clamav Version0.95 Updaterc1

Clamav ≫ Clamav Version0.95 Updaterc2

Clamav ≫ Clamav Version0.95 Updatesrc1

Clamav ≫ Clamav Version0.95 Updatesrc2

Clamav ≫ Clamav Version0.95.1

Clamav ≫ Clamav Version0.95.2

Clamav ≫ Clamav Version0.95.3

Clamav ≫ Clamav Version0.96

Clamav ≫ Clamav Version0.96 Updaterc1

Clamav ≫ Clamav Version0.96 Updaterc2

Clamav ≫ Clamav Version0.96.1

Clamav ≫ Clamav Version0.96.2

Clamav ≫ Clamav Version0.96.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.53%	0.92

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

http://support.apple.com/kb/HT4581

http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=master

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051905.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052401.html

http://openwall.com/lists/oss-security/2010/12/03/1

http://openwall.com/lists/oss-security/2010/12/03/3

http://openwall.com/lists/oss-security/2010/12/03/6

http://secunia.com/advisories/42426

Vendor Advisory

http://secunia.com/advisories/42523

Vendor Advisory

http://secunia.com/advisories/42555

http://secunia.com/advisories/42720

http://www.mandriva.com/security/advisories?name=MDVSA-2010:249

http://www.securityfocus.com/bid/45152

http://www.securitytracker.com/id?1024818

http://www.ubuntu.com/usn/USN-1031-1

http://www.vupen.com/english/advisories/2010/3135

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3137

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3185

https://bugzilla.redhat.com/show_bug.cgi?id=659861

http://xorl.wordpress.com/2010/12/05/cve-2010-4261-clamav-icon_cb-off-by-one/

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2344

https://nvd.nist.gov/vuln/detail/CVE-2010-4261

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-4261

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-4261

EUVD