Clam Anti-Virus ClamAV MS-Expand File Parsing Remote Denial Of Service Vulnerability

Clam Anti-Virus ClamAV MS-Expand File Parsing Remote Denial Of Service Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue.

Debian has released advisory DSA 737-1 to address various issues affecting clamav. Please see the referenced advisory for more information.

Conectiva Linux has released security announcement CLSA-2005:973 addressing this issue. Please see the referenced advisory for details on obtaining abd applying the appropriate updates.

Debian has released security advisory DSA 773-1 addressing several issues for their AMD64 port of the operating system. Please see the referenced advisory for further information.

Clam Anti-Virus ClamAV 0.51

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.52

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.53

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.54

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.60

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.65

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.67

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.68

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.68 -1

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.70

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc4

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc3

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc1

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc2

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.81

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.82

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.83

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.84

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Debian clamav-base_0.84-2.sarge.1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.84 -2.sarge.1_all.deb

Debian clamav-daemon_0.84-2.sarge.1_alpha.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_alpha.deb

Debian clamav-daemon_0.84-2.sarge.1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_amd64.deb

Debian clamav-daemon_0.84-2.sarge.1_arm.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_arm.deb

Debian clamav-daemon_0.84-2.sarge.1_hppa.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_hppa.deb

Debian clamav-daemon_0.84-2.sarge.1_i386.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_i386.deb

Debian clamav-daemon_0.84-2.sarge.1_ia64.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_ia64.deb

Debian clamav-daemon_0.84-2.sarge.1_m68k.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_m68k.deb

Debian clamav-daemon_0.84-2.sarge.1_mips.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_mips.deb

Debian clamav-daemon_0.84-2.sarge.1_mipsel.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_mipsel.deb

Debian clamav-daemon_0.84-2.sarge.1_powerpc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_powerpc.deb

Debian clamav-daemon_0.84-2.sarge.1_s390.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_s390.deb

Debian clamav-daemon_0.84-2.sarge.1_sparc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.1_sparc.deb

Debian clamav-docs_0.84-2.sarge.1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.84 -2.sarge.1_all.deb

Debian clamav-freshclam_0.84-2.sarge.1_alpha.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_alpha.deb

Debian clamav-freshclam_0.84-2.sarge.1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_amd64.deb

Debian clamav-freshclam_0.84-2.sarge.1_arm.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_arm.deb

Debian clamav-freshclam_0.84-2.sarge.1_hppa.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_hppa.deb

Debian clamav-freshclam_0.84-2.sarge.1_i386.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_i386.deb

Debian clamav-freshclam_0.84-2.sarge.1_ia64.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_ia64.deb

Debian clamav-freshclam_0.84-2.sarge.1_m68k.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_m68k.deb

Debian clamav-freshclam_0.84-2.sarge.1_mips.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_mips.deb

Debian clamav-freshclam_0.84-2.sarge.1_powerpc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_powerpc.deb

Debian clamav-freshclam_0.84-2.sarge.1_s390.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_s390.deb

Debian clamav-freshclam_0.84-2.sarge.1_sparc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.1_sparc.deb

Debian clamav-milter_0.84-2.sarge.1_alpha.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_alpha.deb

Debian clamav-milter_0.84-2.sarge.1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_amd64.deb

Debian clamav-milter_0.84-2.sarge.1_arm.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_arm.deb

Debian clamav-milter_0.84-2.sarge.1_hppa.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_hppa.deb

Debian clamav-milter_0.84-2.sarge.1_i386.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_i386.deb

Debian clamav-milter_0.84-2.sarge.1_ia64.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_ia64.deb

Debian clamav-milter_0.84-2.sarge.1_m68k.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_m68k.deb

Debian clamav-milter_0.84-2.sarge.1_mips.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_mips.deb

Debian clamav-milter_0.84-2.sarge.1_mipsel.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_mipsel.deb

Debian clamav-milter_0.84-2.sarge.1_powerpc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_powerpc.deb

Debian clamav-milter_0.84-2.sarge.1_s390.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_s390.deb

Debian clamav-milter_0.84-2.sarge.1_sparc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.1_sparc.deb

Debian clamav-testfiles_0.84-2.sarge.1_all.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.84-2.sarge.1_all.deb

Debian clamav/libclamav1_0.84-2.sarge.1_alpha.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_alpha.deb

Debian clamav/libclamav1_0.84-2.sarge.1_mips.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_mips.deb

Debian clamav_0.84-2.sarge.1_alpha.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_alpha.deb

Debian clamav_0.84-2.sarge.1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_amd64.deb

Debian clamav_0.84-2.sarge.1_arm.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_arm.deb

Debian clamav_0.84-2.sarge.1_hppa.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_hppa.deb

Debian clamav_0.84-2.sarge.1_i386.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_i386.deb

Debian clamav_0.84-2.sarge.1_ia64.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_ia64.deb

Debian clamav_0.84-2.sarge.1_m68k.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_m68k.deb

Debian clamav_0.84-2.sarge.1_mips.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_mips.deb

Debian clamav_0.84-2.sarge.1_mipsel.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_mipsel.deb

Debian clamav_0.84-2.sarge.1_powerpc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_powerpc.deb

Debian clamav_0.84-2.sarge.1_s390.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_s390.deb

Debian clamav_0.84-2.sarge.1_sparc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.1_sparc.deb

Debian libclamav-dev_0.84-2.sarge.1_alpha.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_alpha.deb

Debian libclamav-dev_0.84-2.sarge.1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_amd64.deb

Debian libclamav-dev_0.84-2.sarge.1_arm.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_arm.deb

Debian libclamav-dev_0.84-2.sarge.1_hppa.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_hppa.deb

Debian libclamav-dev_0.84-2.sarge.1_i386.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_i386.deb

Debian libclamav-dev_0.84-2.sarge.1_ia64.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_ia64.deb

Debian libclamav-dev_0.84-2.sarge.1_m68k.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_m68k.deb

Debian libclamav-dev_0.84-2.sarge.1_mipsel.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_mipsel.deb

Debian libclamav-dev_0.84-2.sarge.1_powerpc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_powerpc.deb

Debian libclamav-dev_0.84-2.sarge.1_s390.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_s390.deb

Debian libclamav-dev_0.84-2.sarge.1_sparc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.1_sparc.deb

Debian libclamav1_0.84-2.sarge.1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_amd64.deb

Debian libclamav1_0.84-2.sarge.1_arm.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_arm.deb

Debian libclamav1_0.84-2.sarge.1_hppa.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_hppa.deb

Debian libclamav1_0.84-2.sarge.1_i386.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_i386.deb

Debian libclamav1_0.84-2.sarge.1_ia64.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_ia64.deb

Debian libclamav1_0.84-2.sarge.1_m68k.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_m68k.deb

Debian libclamav1_0.84-2.sarge.1_mips.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_mips.deb

Debian libclamav1_0.84-2.sarge.1_mipsel.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_mipsel.deb

Debian libclamav1_0.84-2.sarge.1_powerpc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_powerpc.deb

Debian libclamav1_0.84-2.sarge.1_s390.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_s390.deb

Debian libclamav1_0.84-2.sarge.1_sparc.deb
Debian 3.1 (sarge)
http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.1_sparc.deb

Clam Anti-Virus ClamAV 0.84 rc1

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.84 rc2

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.85

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.85.1

Clam Anti-Virus clamav-0.86.1.tar.gz
http://prdownloads.sourceforge.net/clamav/clamav-0.86.1.tar.gz?downloa d

Conectiva clamav-0.86.1-70136U10_9cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-0.86.1-70136U10_9cl .i386.rpm

Conectiva clamav-0.86.1-76089U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/clamav-0.86.1-76089U90_2cl. i386.rpm

Conectiva clamav-database-0.86.1.20050625-70136U10_9cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-database-0.86.1.200 50625-70136U10_9cl.i386.rpm

Conectiva clamav-database-0.86.1.20050625-76089U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/clamav-database-0.86.1.2005 0625-76089U90_2cl.i386.rpm

Conectiva libclamav-devel-0.86.1-70136U10_9cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-0.86.1-701 36U10_9cl.i386.rpm

Conectiva libclamav-devel-0.86.1-76089U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libclamav-devel-0.86.1-7608 9U90_2cl.i386.rpm

Conectiva libclamav-devel-static-0.86.1-70136U10_9cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-static-0.8 6.1-70136U10_9cl.i386.rpm

Conectiva libclamav-devel-static-0.86.1-76089U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libclamav-devel-static-0.86 .1-76089U90_2cl.i386.rpm

Conectiva libclamav1-0.86.1-70136U10_9cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav1-0.86.1-70136U10 _9cl.i386.rpm

Conectiva libclamav1-0.86.1-76089U90_2cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libclamav1-0.86.1-76089U90_ 2cl.i386.rpm