ClamAV 'libamav/pe. c' Heap Buffer Overflow Vulnerability

ClamAV 'libamav/pe. c' Heap Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
ClamAV
Description:
Bugtraq id: 71242

Clam AntiVirus is a Unix GPL AntiVirus tool kit, which is used by many email gateway products.

ClamAV has a heap buffer overflow vulnerability in the implementation of AntiVirus. This vulnerability occurs because the application cannot perform a boundary check when scanning the constructed Portable Executable file, after successful exploitation, attackers can execute arbitrary code in the context of the affected application.

<* Source: Damien Millescamps
*>

Suggestion:
Vendor patch:

ClamAV
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.clamav.net/

Completely open-source anti-virus software ClamAV

Install Comodo Antivirus in Linux

Build ClamAV in Linux

This article permanently updates the link address: