CVE-2008-1389 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-1389
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1389

Description: libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

CVE Status: Candidate

References: SUSE http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html ST 1020805 SAID Secunia Advisory: SA31725 Secunia Advisory: SA32030 Secunia Advisory: SA31906 Secunia Advisory: SA32222 Secunia Advisory: SA32699 Secunia Advisory: SA31982 MISC http://int21.de/cve/CVE-2008-1389-clamav-chd.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:189 GENTOO http://security.gentoo.org/glsa/glsa-200809-18.xml FEDORA CONFIRM http://kolab.org/security/kolab-vendor-notice-22.txt http://support.apple.com/kb/HT3216 http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661 BID 30994 31681 APPLE http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Return to the previous page.