Bug#320014: ClamAV library heap overflows

2005-07-26 Thread Adam D. Barratt
package clamav merge 320014 319898 thanks On Tuesday, July 26, 2005 1:47 PM, Oliver Paulus <[EMAIL PROTECTED]> wrote: > Package: clamav > Version: 0.86.1-2 > Severity: critical > > clamav <= 0.86.1 has several heap overflows. "At least 4 of its file This has already been reported as #319898, so

Bug#320014: ClamAV library heap overflows

2005-07-26 Thread Oliver Paulus
Package: clamav Version: 0.86.1-2 Severity: critical clamav <= 0.86.1 has several heap overflows. "At least 4 of its file format processors contain remote security bugs. Specifically, during the processing of TNEF, CHM and FSG formats an attacker is able to trigger several integer overflows that a