ClamAV 'libclamav/pe.c' WWPACK File Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	28798
Class:	Boundary Condition Error
CVE:	CVE-2008-1833
Remote:	Yes
Local:	No
Published:	Apr 15 2008 12:00AM
Updated:	Aug 25 2008 02:55PM
Credit:	Damian Put and Thomas Pollet
Vulnerable:	SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise SDK 10.SP1 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux Enterprise Server 10.SP1 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc Red Hat Fedora 8 Red Hat Fedora 7 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Clam Anti-Virus ClamAV 0.92.1 Astaro Security Gateway 7.006 Astaro Security Gateway 7.005 Astaro Security Gateway 7

Not Vulnerable:	Clam Anti-Virus ClamAV 0.93