Secunia Logo
 
CVE Reference: CVE-2005-3239
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2005-3239

Description:
The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.

CVE Status:
Candidate

References:

SUSE

ST
  1015154

SAID
  Secunia Advisory: SA17451
  Secunia Advisory: SA17448
  Secunia Advisory: SA17559
  Secunia Advisory: SA17184
  Secunia Advisory: SA17501

OSVDB
  20536

MANDRIVA
  http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:205

GENTOO
  http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml

DEBIAN
  http://www.debian.org/security/2005/dsa-887

CONFIRM
  http://sourceforge.net/project/shownotes.php?release_id=368319
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333566

BID
  15101


Return to the previous page.