CVE-2008-1835 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-1835
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1835

Description: ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/41874 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html SAID Secunia Advisory: SA29891 Secunia Advisory: SA30328 Secunia Advisory: SA31576 Secunia Advisory: SA31882 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:088 GENTOO http://security.gentoo.org/glsa/glsa-200805-19.xml CONFIRM http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html CERT http://www.us-cert.gov/cas/techalerts/TA08-260A.html BID 28784 APPLE http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Return to the previous page.