CVE-2010-0098
First published: Thu Apr 08 2010(Updated: )
ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities.
Credit: cret@cert.org cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Clamav Clamav | =0.95.2 | |
| Clamav Clamav | =0.86.2 | |
| Clamav Clamav | =0.88.5 | |
| Clamav Clamav | =0.02 | |
| Clamav Clamav | =0.92 | |
| Clamav Clamav | =0.95-rc2 | |
| Clamav Clamav | =0.15 | |
| Clamav Clamav | =0.90-rc2 | |
| Clamav Clamav | =0.75.1 | |
| Clamav Clamav | =0.65 | |
| Clamav Clamav | =0.88.7 | |
| Clamav Clamav | =0.81 | |
| Clamav Clamav | =0.86 | |
| Clamav Clamav | =0.01 | |
| Clamav Clamav | =0.85 | |
| Clamav Clamav | =0.84 | |
| Clamav Clamav | =0.3 | |
| Clamav Clamav | =0.93.1 | |
| Clamavs Clamav | =0.04 | |
| Clamav Clamav | =0.90-rc1.1 | |
| Clamav Clamav | =0.95.1 | |
| Clamav Clamav | =0.93 | |
| Clamav Clamav | =0.90 | |
| Clamav Clamav | =0.70-rc | |
| Clamav Clamav | =0.86-rc1 | |
| Clamav Clamav | =0.68.1 | |
| Clamav Clamav | =0.03 | |
| Clamav Clamav | =0.87.1 | |
| Clamav Clamav | =0.9-rc1 | |
| Clamav Clamav | =0.74 | |
| Clamav Clamav | =0.93.3 | |
| Clamav Clamav | =0.88 | |
| Clamav Clamav | =0.91-rc1 | |
| Clamav Clamav | =0.86.1 | |
| Clamav Clamav | =0.71 | |
| Clamav Clamav | =0.88.1 | |
| Clamav Clamav | =0.60p | |
| Clamav Clamav | =0.94 | |
| Clamav Clamav | =0.80-rc | |
| Clamav Clamav | =0.91.2 | |
| Clamav Clamav | =0.90.3 | |
| Clamav Clamav | =0.85.1 | |
| Clamav Clamav | =0.90-rc1 | |
| Clamav Clamav | =0.13 | |
| Clamav Clamav | =0.10 | |
| Clamav Clamav | =0.94.2 | |
| Clamav Clamav | =0.80-rc3 | |
| Clamav Clamav | =0.12 | |
| Clamav Clamav | =0.23 | |
| Clamav Clamav | =0.84-rc1 | |
| Clamav Clamav | =0.80-rc2 | |
| Clamav Clamav | =0.95 | |
| Clamav Clamav | =0.60 | |
| Clamav Clamav | =0.88.2 | |
| Clamav Clamav | =0.83 | |
| Clamav Clamav | =0.20 | |
| Clamav Clamav | =0.80-rc4 | |
| Clamav Clamav | =0.90-rc3 | |
| Clamav Clamav | =0.70 | |
| Clamav Clamav | =0.88.4 | |
| Clamav Clamav | =0.14 | |
| Clamav Clamav | =0.24 | |
| Clamav Clamav | =0.66 | |
| Clamav Clamav | =0.51 | |
| Clamav Clamav | =0.52 | |
| Clamav Clamav | =0.22 | |
| Clamav Clamav | =0.72 | |
| Clamav Clamav | =0.95-rc1 | |
| Clamavs Clamav | =0.06 | |
| Clamav Clamav | =0.91-rc2 | |
| Clamav Clamav | =0.75 | |
| Clamav Clamav | =0.05 | |
| Clamav Clamav | =0.91 | |
| Clamav Clamav | =0.54 | |
| Clamav Clamav | =0.96-rc1 | |
| Clamav Clamav | =0.80 | |
| Clamav Clamav | <=0.96 | |
| Clamav Clamav | =0.87 | |
| Clamav Clamav | =0.21 | |
| Clamav Clamav | =0.84-rc2 | |
| Clamav Clamav | =0.67-1 | |
| Clamav Clamav | =0.14-pre | |
| Clamav Clamav | =0.90.1 | |
| Clamav Clamav | =0.91.1 | |
| Clamav Clamav | =0.95.3 | |
| Clamav Clamav | =0.88.3 | |
| Clamav Clamav | =0.67 | |
| Clamav Clamav | =0.92.1 | |
| Clamav Clamav | =0.90.2 | |
| Clamav Clamav | =0.68 | |
| Clamav Clamav | =0.53 | |
| Clamav Clamav | =0.93.2 | |
| Clamav Clamav | =0.88.6 | |
| Clamav Clamav | =0.94.1 | |
| Clamav Clamav | =0.82 | |
| Clamav Clamav | =0.73 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/39329
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1826
- http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96
- http://www.securityfocus.com/bid/39262
- http://www.vupen.com/english/advisories/2010/0827
- http://secunia.com/advisories/39293
- http://www.vupen.com/english/advisories/2010/0832
- http://www.ubuntu.com/usn/USN-926-1
- http://www.vupen.com/english/advisories/2010/0909
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:082
- http://www.vupen.com/english/advisories/2010/1001
- http://secunia.com/advisories/39656
- http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html
- http://www.vupen.com/english/advisories/2010/1206
- http://www.openwall.com/lists/oss-security/2010/04/08/3
- http://www.openwall.com/lists/oss-security/2010/04/06/4
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html
- http://support.apple.com/kb/HT4312
- http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/severity
- agent/references
- agent/author
- agent/event
- agent/weakness
- agent/type
- agent/description
- agent/remedy
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/clamav
- canonical/clamav clamav
- version/clamav clamav/0.95.2
- version/clamav clamav/0.86.2
- version/clamav clamav/0.88.5
- version/clamav clamav/0.02
- version/clamav clamav/0.92
- version/clamav clamav/0.95-rc2
- version/clamav clamav/0.15
- version/clamav clamav/0.90-rc2
- version/clamav clamav/0.75.1
- version/clamav clamav/0.65
- version/clamav clamav/0.88.7
- version/clamav clamav/0.81
- version/clamav clamav/0.86
- version/clamav clamav/0.01
- version/clamav clamav/0.85
- version/clamav clamav/0.84
- version/clamav clamav/0.3
- version/clamav clamav/0.93.1
- vendor/clamavs
- canonical/clamavs clamav
- version/clamavs clamav/0.04
- version/clamav clamav/0.90-rc1.1
- version/clamav clamav/0.95.1
- version/clamav clamav/0.93
- version/clamav clamav/0.90
- version/clamav clamav/0.70-rc
- version/clamav clamav/0.86-rc1
- version/clamav clamav/0.68.1
- version/clamav clamav/0.03
- version/clamav clamav/0.87.1
- version/clamav clamav/0.9-rc1
- version/clamav clamav/0.74
- version/clamav clamav/0.93.3
- version/clamav clamav/0.88
- version/clamav clamav/0.91-rc1
- version/clamav clamav/0.86.1
- version/clamav clamav/0.71
- version/clamav clamav/0.88.1
- version/clamav clamav/0.60p
- version/clamav clamav/0.94
- version/clamav clamav/0.80-rc
- version/clamav clamav/0.91.2
- version/clamav clamav/0.90.3
- version/clamav clamav/0.85.1
- version/clamav clamav/0.90-rc1
- version/clamav clamav/0.13
- version/clamav clamav/0.10
- version/clamav clamav/0.94.2
- version/clamav clamav/0.80-rc3
- version/clamav clamav/0.12
- version/clamav clamav/0.23
- version/clamav clamav/0.84-rc1
- version/clamav clamav/0.80-rc2
- version/clamav clamav/0.95
- version/clamav clamav/0.60
- version/clamav clamav/0.88.2
- version/clamav clamav/0.83
- version/clamav clamav/0.20
- version/clamav clamav/0.80-rc4
- version/clamav clamav/0.90-rc3
- version/clamav clamav/0.70
- version/clamav clamav/0.88.4
- version/clamav clamav/0.14
- version/clamav clamav/0.24
- version/clamav clamav/0.66
- version/clamav clamav/0.51
- version/clamav clamav/0.52
- version/clamav clamav/0.22
- version/clamav clamav/0.72
- version/clamav clamav/0.95-rc1
- version/clamavs clamav/0.06
- version/clamav clamav/0.91-rc2
- version/clamav clamav/0.75
- version/clamav clamav/0.05
- version/clamav clamav/0.91
- version/clamav clamav/0.54
- version/clamav clamav/0.96-rc1
- version/clamav clamav/0.80
- version/clamav clamav/0.96
- version/clamav clamav/0.87
- version/clamav clamav/0.21
- version/clamav clamav/0.84-rc2
- version/clamav clamav/0.67-1
- version/clamav clamav/0.14-pre
- version/clamav clamav/0.90.1
- version/clamav clamav/0.91.1
- version/clamav clamav/0.95.3
- version/clamav clamav/0.88.3
- version/clamav clamav/0.67
- version/clamav clamav/0.92.1
- version/clamav clamav/0.90.2
- version/clamav clamav/0.68
- version/clamav clamav/0.53
- version/clamav clamav/0.93.2
- version/clamav clamav/0.88.6
- version/clamav clamav/0.94.1
- version/clamav clamav/0.82
- version/clamav clamav/0.73