Description
The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/25796 ↗
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=511 ↗
- http://www.novell.com/linux/security/advisories/2007_33_clamav.html ↗
- http://secunia.com/advisories/25525 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34823 ↗
- http://secunia.com/advisories/25523 ↗
- http://www.debian.org/security/2007/dsa-1320 ↗
- http://kolab.org/security/kolab-vendor-notice-15.txt ↗
- http://secunia.com/advisories/25688 ↗
- http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html ↗
- http://osvdb.org/45392 ↗
- http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog ↗
- http://security.gentoo.org/glsa/glsa-200706-05.xml ↗