CVE-2010-4260

Related Files

Gentoo Linux Security Advisory 201110-20

Posted Oct 24, 2011

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201110-20 - Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. Versions less than 0.97.3 are affected.

tags | advisory, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2010-0405, CVE-2010-3434, CVE-2010-4260, CVE-2010-4261, CVE-2010-4479, CVE-2011-1003, CVE-2011-2721, CVE-2011-3627

SHA-256 | 8a4cb5b5ff29de3a4a524379def9f673e2628a57bd1fb5f9d7b6f15abab93201

Download | Favorite | View

Ubuntu Security Notice USN-1031-1

Posted Dec 10, 2010

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1031-1 - Arkadiusz Miskiewicz and others discovered that the PDF processing code in libclamav improperly validated input. This could allow a remote attacker to craft a PDF document that could crash clamav or possibly execute arbitrary code. It was discovered that an off-by-one error in the icon_cb function in pe_icons.c in libclamav could allow an attacker to corrupt memory, causing clamav to crash or possibly execute arbitrary code. In the default installation, attackers would be isolated by the clamav AppArmor profile.

tags | advisory, remote, arbitrary

systems | linux, ubuntu

advisories | CVE-2010-4260, CVE-2010-4261, CVE-2010-4479

SHA-256 | d0f9bc4b01b56f6c35bd1a69cb58cd5c1ff58f1214a2c3965971aaddf9b5ea2b

Download | Favorite | View

Mandriva Linux Security Advisory 2010-249

Posted Dec 8, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-249 - Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted PDF document. Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.

tags | advisory, remote, denial of service, arbitrary, vulnerability

systems | linux, mandriva

advisories | CVE-2010-4260, CVE-2010-4261, CVE-2010-4479

SHA-256 | d00420a0965c5f43de48674470f887dcc475ab4ccb679111164c3ca560f27022

Download | Favorite | View