Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClamAV多个安全漏洞
Vulnerability Description
Clam AntiVirus是Unix的GPL杀毒工具包,很多邮件网关产品都在使用。 ClamAV中存在多个安全漏洞,可能允许恶意用户导致拒绝服务并入侵系统。 1) libclamav/pe.c的cli_scanpe()函数的PE首部解析程序存在整数溢出漏洞。攻击者可以通过特制的UPX文件导致堆溢出并执行任意代码。 成功攻击要求禁用了ArchiveMaxFileSize选项。 2) shared/output.c中的日志处理时的一些格式串错误可能允许执行任意代码。 3) ibclamav/others.c
CVSS Information
N/A
Vulnerability Type
N/A