• info
• discussion
• exploit
• solution
• references

Clam Anti-Virus CHM Unpacker Denial Of Service Vulnerability

Solution:
The vendor has released version 0.88.5 of ClamAV to address this issue. Please see the vendor references for more information.


Securecomputing SnapGear SG565 0

• Secure Computing Secure Computing SnapGear 3.1.4u2
  http://www.cyberguard.info/snapgear/releases.html

Clam Anti-Virus ClamAV 0.88.4

• Clam Anti-Virus Clam Antivirus 0.88.5
  http://sourceforge.net/project/shownotes.php?release_id=455799


• Mandriva clamav-0.88.5-0.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.88.5-0.1.20060mlcs4.src.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.88.5-0.1.20060mlcs4.x86_64.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.88.5-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.88.5-0.1.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-0.88.5-0.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.88.5-0.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.88.5-0.1.20060mlcs4.x86_64.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.88.5-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-db-0.88.5-0.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.88.5-0.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.88.5-0.1.20060mlcs4.x86_64.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.88.5-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamav-milter-0.88.5-0.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.88.5-0.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.88.5-0.1.20060mlcs4.x86_64.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.88.5-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva clamd-0.88.5-0.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-0.88.5-0.1.20060mlcs4.x86_64.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-0.88.5-0.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-devel-0.88.5-0.1.20060mlcs4.x86_64.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva lib64clamav1-devel-0.88.5-0.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-0.88.5-0.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-0.88.5-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-devel-0.88.5-0.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva libclamav1-devel-0.88.5-0.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

Trustix Secure Linux 2.2

• Trustix clamav-0.88.5-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix clamav-devel-0.88.5-1tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-2.4.33.3-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-BOOT-2.4.33.3-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-doc-2.4.33.3-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-smp-2.4.33.3-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-source-2.4.33.3-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-utils-2.4.33.3-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-cli-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-curl-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-devel-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-exif-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-fcgi-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-gd-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-imap-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-ldap-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mhash-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysql-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysqli-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pgsql-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-zlib-5.1.6-3tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-cli-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-curl-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-domxml-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-exif-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-fcgi-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-gd-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-imap-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-ldap-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-mhash-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-mysql-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-pgsql-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php4-test-4.4.4-4tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-2.2.3-17tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-dbm-2.2.3-17tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-devel-2.2.3-17tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-docs-2.2.3-17tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-gdbm-2.2.3-17tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-modules-2.2.3-17tr.i586.rpm
  TSL 2.2
  ftp://ftp.trustix.org/pub/trustix/updates

Trustix Secure Linux 3.0

• Trustix clamav-0.88.5-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix clamav-devel-0.88.5-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-2.6.17.14-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-doc-2.6.17.14-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-headers-2.6.17.14-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-smp-2.6.17.14-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-smp-headers-2.6.17.14-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-source-2.6.17.14-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix kernel-utils-2.6.17.14-1tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-calendar-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-cli-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-curl-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-dba-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-devel-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-exif-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-fcgi-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-gd-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-imap-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-ldap-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mhash-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysql-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-mysqli-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pgsql-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-pspell-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-snmp-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix php-xslt-5.1.6-3tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-2.3.5-6tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-devel-2.3.5-6tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-docs-2.3.5-6tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-gdbm-2.3.5-6tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-idle-2.3.5-6tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix python-modules-2.3.5-6tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-devel-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-doc-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-100dpi-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-75dpi-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-cid-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-cyrillic-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-otf-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-speedo-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-ttf-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-fonts-type1-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-libs-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates


• Trustix xorg-x11-sdk-6.8.2-12tr.i586.rpm
  TSL 3.0
  ftp://ftp.trustix.org/pub/trustix/updates