Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

CVE-2014-9050 — MEDIUM severity vulnerability | Release Alert

CVE-2014-9050

MEDIUMCVSS v2

Published

December 1, 2014

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.

Cisco-Talos/clamav

GitHubClamAV - Documentation is here: https://docs.clamav.net

= 0.86.2, = 0.88.5, = 0.02, = 0.92, = 0.8, = 0.15, = 0.90, = 0.75.1, = 0.65, = 0.93, = 0.92_p0, = 0.88.7, = 0.87.1, = 0.84, = 0.3, = 0.93.1, = 0.85, = 0.01, = 0.86, = 0.70, = 0.91.2_p0, = 0.81, = 0.68.1, = 0.03, <= 0.94.3, = 0.91, = 0.80, = 0.74, = 0.13, = 0.90.1_p0, = 0.88.7_p0, = 0.88.1, = 0.88, = 0.20, = 0.94.2, = 0.90.3_p1, = 0.86.1, = 0.83, = 0.71, = 0.60p, = 0.23, = 0.12, = 0.10, = 0.94, = 0.93.3, = 0.91.2, = 0.90.3, = 0.9, = 0.88.2, = 0.85.1, = 0.60, = 0.88.6, = 0.87, = 0.73, = 0.72, = 0.67, = 0.66, = 0.51, = 0.14, = 0.93.2, = 0.91.1, = 0.90.1, = 0.88.7_p1, = 0.80_rc, = 0.75, = 0.68, = 0.67-1, = 0.53, = 0.52, = 0.94.1, = 0.92.1, = 0.90.3_p0, = 0.88.4, = 0.82, = 0.24, = 0.90.2_p0, = 0.90.2, = 0.88.3, = 0.54, = 0.22, = 0.21, = 0.05NVD

clamav

Python Package IndexA Python interface to ClamAV.

More on this CVE

NVD↗GitHub Advisory↗

ClamAV

ChocolateyClamAV is an open-source (GPL) anti-virus engine used in a variety of situations, including email and web scanning, and endpoint security. It provides many utilities for users, including a flexible and scalable multi-threaded daemon, a command-line scanner and an advanced tool for automatic database updates. ## Features * Command-line scanner. * Milter interface for sendmail. * Advanced database updater with support for scripted updates and digital signatures. * Virus database updated multiple times per day. * Built-in support for all standard mail file formats. * Built-in support for various archive formats, including ZIP, RAR, Dmg, Tar, GZIP, BZIP2, OLE2, Cabinet, CHM, BinHex, SIS and others. * Built-in support for ELF executables and Portable Executable files packed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and obfuscated with SUE, Y0da Cryptor and others. * Built-in support for popular document formats, including MS Office and MacOffice files, HTML, Flash, RTF and PDF. ## Notes * This is an automatically updated package. If you find it is out of date by more than a week, please contact the maintainer(s), to let the know the package is no longer updating, using: * The 'Contact Maintainers' link on the package page, or * The 'Package Source' link on the package page and raising an issue.