Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClamAV libclamav库PeSpin堆溢出漏洞
Vulnerability Description
Clam AntiVirus是Unix的GPL杀毒工具包,很多邮件网关产品都在使用。 ClamAV中负责解压用PeSpin加密所包装的PE库的代码存在堆溢出漏洞,攻击者可能通过诱使用户处理畸形文件控制用户系统。 以下为libclamav/spin.c中的有漏洞代码段: 417 key32 = cli_readint32(ep+0x2fee); ... 427 cli_dbgmsg("spin: Resources (sect%d) appear to be compressed\n\tuncompress
CVSS Information
N/A
Vulnerability Type
N/A