Debian DSA-1680-1 : clamav - buffer overflow, stack consumption
High Nessus Plugin ID 35033
Synopsis
The remote Debian host is missing a security-related update.
Description
Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow and potentially arbitrary code execution (CVE-2008-5050 ).
Ilja van Sprundel discovered that ClamAV contains a denial of service condition in its JPEG file processing because it does not limit the recursion depth when processing JPEG thumbnails (CVE-2008-5314 ).
Solution
Upgrade the clamav packages.
For the stable distribution (etch), these problems have been fixed in version 0.90.1dfsg-4etch16.