ClamAV before 0.97.7 has WWPack corrupt heap memory

The remote host is affected by the vulnerability described in GLSA-201405-08 (ClamAV: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ClamAV. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted file, leading to       arbitrary code execution or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Versions of ClamAV earlier than 0.97.7 are potentially affected by the following vulnerabilities : 

  - A memory access error exists related to the function 'check_user_password' and debug-printing that could access 32 bytes rather than the proper 16 bytes. (Issue 6804)

  - A heap-corruption error exists in the function 'wwunpack' in the file 'libclamav/wwunpack.c' related to unpacking 'WWPack' files. (Issue 6806)

  - An unspecified overflow error exists related to 'y0da' emulation that could result in application crashes or other unspecified impact. (Issue 6809)

  - A double-free error exists in the function 'unrar_extract_next_prepare' in the file 'libclamunrar_iface/unrar_iface.c' related to handling 'RAR' files

According to its version, the ClamAV clamd antivirus daemon on the remote host is earlier than 0.97.7 and is, therefore, potentially affected by the following vulnerabilities :

  - A memory access error exists related to the function     'check_user_password' and debug-printing that could     access 32 bytes rather than the proper 16 bytes.
    (Issue 6804 / CVE-2013-7089)

  - A heap-corruption error exists in the function     'wwunpack' in the file 'libclamav/wwunpack.c' related     to unpacking 'WWPack' files. (Issue 6806 /     CVE-2013-7087)

  - An unspecified overflow error exists related to 'y0da'     emulation that could result in application crashes or     other unspecified impact. (Issue 6809 / CVE-2013-7088)

  - A double-free error exists in the function     'unrar_extract_next_prepare' in the file     'libclamunrar_iface/unrar_iface.c' related to handling     'RAR' files.

ID	Name	Product	Family	Severity
74051	GLSA-201405-08 : ClamAV: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
6781	ClamAV < 0.97.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
65668	ClamAV < 0.97.7 Multiple Vulnerabilities	Nessus	Misc.	critical

Detections

Analytics

CVE-2013-7087

critical

Tenable Plugins

critical

medium

critical