Secunia

Some vulnerabilities have been reported in Clam AntiVirus. One has an unknown impact, while others can be exploited by malicious people to cause a DoS (Denial of Service) or to compromise a vulnerable system.

1) An unspecified file descriptor leak error exists within libclamav/chmunpack.c.

2) A signedness error exists within the "cab_unstore()" function in libclamav/cab.c. This can be exploited to cause a stack based buffer overflow via a specially crafted ".cab" file, and may allow execution of arbitrary code or crashing of the clamd process.

3) A file descriptor leak error when handling PDF files with empty objects exists within libclamav/pdf.c. This can potentially be exploited to cause a DoS by e.g. tricking an automated system into processing specially crafted PDF files.

Solution
Update to version 0.90.2.

Provided and/or discovered by
1, 3) Reported by the vendor
2) iDefense Labs

Changelog
Further details available in Customer Area

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=500765

2) iDefense:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=513

Deep Links
Links available in Customer Area