LxCenter Forum: Product Security » ClamAV PDF Processing Denial of Service Vulnerability

HyperVM & Kloxo Support

Forum

Members

Help

Home

Home » Archive » Product Security » ClamAV PDF Processing Denial of Service Vulnerability(Vulnerability is reported in 0.96. Other versions may also be affected.)

Show: Today's Messages :: Show Polls :: Message Navigator

ClamAV PDF Processing Denial of Service Vulnerability [message #74650]

Fri, 21 May 2010 16:39

Ice-Man

Messages: 93
Registered: September 2008

Valuable Member

A vulnerability has been reported in ClamAV, which can be exploited
by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the "cli_pdf()"
function in libclamav/pdf.c when processing certain PDF files. This
can be exploited to e.g. cause a crash via specially crafted PDF
files.

The vulnerability is reported in version 0.96. Other versions may
also be affected.

version 0.96.1 available --> http://www.clamav.net/lang/en/download/sources/

Report message to a moderator

Re: ClamAV PDF Processing Denial of Service Vulnerability [message #74657 is a reply to message #74650]

Fri, 21 May 2010 19:04

LxCenter_Danny

Messages: 2068
Registered: July 2007
Location: Netherlands

Grandmaster
LxCenter Core Team Member
LxCenter Representative

Thanx will look into it asap.

LxCenter - System Operations

Report message to a moderator

Re: ClamAV PDF Processing Denial of Service Vulnerability [message #74684 is a reply to message #74657]

Sat, 22 May 2010 22:44

LxCenter_Danny

Messages: 2068
Registered: July 2007
Location: Netherlands

Grandmaster
LxCenter Core Team Member
LxCenter Representative

The rpm packages depends on sources of qmailtoaster website.
They have not released a new clamav-toaster source yet.
Altho they have seem their own problems with website hosting, maybe things are slowed down because of that.

If it takes too long than i consider take a look in the source and apply .1 myself if possible.

Please do watch the qmailtoaster website also and notify back any new packages. ( i dont look at the site every day )

LxCenter - System Operations

Report message to a moderator