This clamav version update to 0.91.1 fixes among other things the long startup time of version 0.90.3 as well as a possibilty to crash clamav with specially crafted rar archives (CVE-2007-3725).

A vulnerability in the RAR VM in ClamAV allowed user-assisted remote attackers to cause a crash via a crafted RAR archive which resulted in a NULL pointer dereference.

Other bugs have also been corrected in 0.91.1 which is being provided with this update.

This clamav version update to 0.91.1 fixes among other things the long startup time of version 0.90.3 as well as a possibilty to crash clamav with specially crafted rar archives. (CVE-2007-3725)

A NULL pointer dereference has been discovered in the RAR VM of Clam Antivirus (ClamAV) which allows user-assisted remote attackers to cause a denial of service via a specially crafted RAR archives.

We are currently unable to provide fixed packages for the MIPS architectures. Those packages will be installed in the security archive when they become available.

The remote host is affected by the vulnerability described in GLSA-200708-04 (ClamAV: Denial of Service)

    Metaeye Security Group reported a NULL pointer dereference in ClamAV     when processing RAR archives.
  Impact :

    A remote attacker could send a specially crafted RAR archive to the     clamd daemon, resulting in a crash and a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. 

This update contains several security fixes for a number of programs.

ID	Name	Product	Family	Published	Updated	Severity
27184	openSUSE 10 Security Update : clamav (clamav-3901)	Nessus	SuSE Local Security Checks	10/17/2007	1/14/2021	medium
25796	Mandrake Linux Security Advisory : clamav (MDKSA-2007:150)	Nessus	Mandriva Local Security Checks	7/27/2007	1/6/2021	medium
29403	SuSE 10 Security Update : clamav (ZYPP Patch Number 3902)	Nessus	SuSE Local Security Checks	12/13/2007	1/14/2021	medium
25782	Debian DSA-1340-1 : clamav - NULL pointer dereference	Nessus	Debian Local Security Checks	7/27/2007	1/4/2021	medium
25869	GLSA-200708-04 : ClamAV: Denial of Service	Nessus	Gentoo Local Security Checks	8/13/2007	1/6/2021	medium
31605	Mac OS X Multiple Vulnerabilities (Security Update 2008-002)	Nessus	MacOS X Local Security Checks	3/19/2008	7/14/2018	critical

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

critical