REDHAT-BUG-659861
First published: Fri Dec 03 2010(Updated: )
Two flaws were reported to have been corrected in ClamAV 0.96.5 [1]: 1) Multiple errors within the processing of PDF files can be exploited to e.g. cause a crash. (<a href="https://access.redhat.com/security/cve/CVE-2010-4260">CVE-2010-4260</a>) 2) An off-by-one error within the "icon_cb()" function can be exploited to cause a memory corruption. (<a href="https://access.redhat.com/security/cve/CVE-2010-4261">CVE-2010-4261</a>) Current Fedora version of ClamAV is 0.96.4 and is vulnerable to these issues. [1] <a href="http://secunia.com/advisories/42426/">http://secunia.com/advisories/42426/</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ClamAV | ||
| ClamAV | <0.96.5 | |
| ClamAV | <0.96.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2010-4260
- https://access.redhat.com/security/cve/CVE-2010-4261
- http://secunia.com/advisories/42426/
- https://access.redhat.com/security/cve/CVE-2010-4479
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4479
- http://openwall.com/lists/oss-security/2010/12/03/6
- http://openwall.com/lists/oss-security/2010/12/03/3
- http://openwall.com/lists/oss-security/2010/12/03/1
- http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=master
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=659861
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2380
- http://secunia.com/advisories/42426
- https://bugzilla.redhat.com/show_bug.cgi?id=659861
Frequently Asked Questions
What are the vulnerabilities associated with REDHAT-BUG-659861?
REDHAT-BUG-659861 addresses two vulnerabilities in ClamAV 0.96.5 related to processing PDF files and an off-by-one error in the icon_cb() function.
How do I fix the vulnerabilities in REDHAT-BUG-659861?
To fix the vulnerabilities in REDHAT-BUG-659861, upgrade ClamAV to version 0.96.5 or later.
What is the impact of the vulnerabilities identified in REDHAT-BUG-659861?
The vulnerabilities in REDHAT-BUG-659861 can lead to application crashes when processing malicious PDF documents.
Which versions of ClamAV are affected by REDHAT-BUG-659861?
Versions of ClamAV prior to 0.96.5 are affected by the vulnerabilities described in REDHAT-BUG-659861.
Is there a workaround for the issues related to REDHAT-BUG-659861?
Currently, the best approach to mitigate the issues in REDHAT-BUG-659861 is to upgrade to the latest version of ClamAV.
- collector/redhat-bugzilla
- alias/CVE-2010-4260
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/clamav
- canonical/clamav