Mandrake Linux Security Advisory : clamav (MDKSA-2006:230)
Medium Nessus Plugin ID 24613
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionThe latest version of ClamAV, 0.88.7, fixes some bugs, including vulnerabilities with handling base64-encoded MIME attachment files that can lead to either a) a crash (CVE-2006-5874), or b) a bypass of virus detection (CVE-2006-6406).
As well, a vulnerability was discovered that allows remote attackers to cause a stack overflow and application crash by wrapping many layers of multipart/mixed content around a document (CVE-2006-6481).
The latest ClamAV is being provided to address these issues.
SolutionUpdate the affected packages.