CVE-2008-3215 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-3215
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-3215

Description: libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44200 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html SAID Secunia Advisory: SA31437 Secunia Advisory: SA31882 MLIST http://www.openwall.com/lists/oss-security/2008/07/15/1 http://www.openwall.com/lists/oss-security/2008/07/08/5 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:166 GENTOO http://security.gentoo.org/glsa/glsa-200808-07.xml CONFIRM http://lurker.clamav.net/message/20080707.155612.ad411b00.en.html http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3920 CERT http://www.us-cert.gov/cas/techalerts/TA08-260A.html APPLE http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Return to the previous page.