Description
The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/17451 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml ↗
- http://securityreason.com/securityalert/152 ↗
- http://secunia.com/advisories/17501 ↗
- http://secunia.com/advisories/17184 ↗
- http://www.osvdb.org/20483 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:205 ↗
- http://secunia.com/advisories/17559 ↗
- http://www.idefense.com/application/poi/display?id=333&type=vulnerabilities ↗
- http://www.securityfocus.com/bid/15316 ↗
- http://sourceforge.net/project/shownotes.php?release_id=368319 ↗
- http://www.vupen.com/english/advisories/2005/2294 ↗
- http://www.debian.org/security/2005/dsa-887 ↗
- http://secunia.com/advisories/17434 ↗
- http://securitytracker.com/id?1015154 ↗