Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Clam AntiVirus ClamAV 缓冲区溢出漏洞
Vulnerability Description
Clam AntiVirus是Unix的GPL杀毒工具包,很多邮件网关产品都在使用。 ClamAV libclamav库中的cab_unstore()函数中存在缓冲区溢出漏洞,远程攻击者可能利用此漏洞控制用户机器。 此外,libclamav/chmunpack.c文件中的chm_decompress_stream函数还存在文件描述符泄露漏洞,可能导致泄露敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A