Secunia

Tim Morgan and Kevin Amorin have reported a vulnerability in Clam AntiVirus, which potentially can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an input validation error in the "filecopy()" function in shared/misc.c when executing the external "ditto" utility. This can be exploited to execute arbitrary commands with the privileges of the Clam AntiVirus process via an infected file with a specially crafted filename containing shell meta-characters.

Successful exploitation requires that Clam AntiVirus has been configured to move files to a quarantine and that the move fails.

The vulnerability only affects Mac OS X systems.

Solution
Update to version 0.84 or later.

Provided and/or discovered by
Tim Morgan and Kevin Amorin

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area