Clam Anti-Virus ClamAV FSG File Handling Buffer Overflow Vulnerability

Bugtraq ID:	15318
Class:	Boundary Condition Error
CVE:	CVE-2005-3303
Remote:	Yes
Local:	No
Published:	Nov 04 2005 12:00AM
Updated:	Nov 04 2005 12:00AM
Credit:	Discovery is credited to an anonymous source.
Vulnerable:	Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 Clam Anti-Virus ClamAV 0.87 Clam Anti-Virus ClamAV 0.86.2 Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.85.1 Clam Anti-Virus ClamAV 0.85 Clam Anti-Virus ClamAV 0.84 rc2 Clam Anti-Virus ClamAV 0.84 rc1 Clam Anti-Virus ClamAV 0.84 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 Clam Anti-Virus ClamAV 0.83 Clam Anti-Virus ClamAV 0.82 Clam Anti-Virus ClamAV 0.81 + Gentoo Linux Clam Anti-Virus ClamAV 0.80 rc4 Clam Anti-Virus ClamAV 0.80 rc3 Clam Anti-Virus ClamAV 0.80 rc2 Clam Anti-Virus ClamAV 0.80 rc1 Clam Anti-Virus ClamAV 0.80 Clam Anti-Virus ClamAV 0.75.1 Clam Anti-Virus ClamAV 0.70 Clam Anti-Virus ClamAV 0.68 -1 Clam Anti-Virus ClamAV 0.68 Clam Anti-Virus ClamAV 0.67 + Gentoo Linux 1.4 _rc3 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 + Gentoo Linux 1.4 Clam Anti-Virus ClamAV 0.65 Clam Anti-Virus ClamAV 0.60 Clam Anti-Virus ClamAV 0.54 Clam Anti-Virus ClamAV 0.53 Clam Anti-Virus ClamAV 0.52 Clam Anti-Virus ClamAV 0.51
Not Vulnerable:	Clam Anti-Virus ClamAV 0.87.1

Clam Anti-Virus ClamAV FSG File Handling Buffer Overflow Vulnerability

ClamAV is prone to a buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer.

This issue occurs when the application attempts to handle FSG files.

Exploitation of this issue could allow attacker-supplied machine code to be executed in the context of the affected application. The issue would occur when the malformed file is scanned manually or automatically in deployments such as email gateways.

Clam Anti-Virus ClamAV FSG File Handling Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Clam Anti-Virus ClamAV FSG File Handling Buffer Overflow Vulnerability

Solution:
Gentoo has released advisory GLSA 200511-04 to address this issue. Gentoo updates may be applied by running the following commands as the superuser:

emerge --sync
emerge --ask --oneshot --verbose ">=app-antivirus/clamav-0.87.1"

Debian GNU/Linux has released advisory DSA 887-1 to address this, and other issues in ClamAV. Please see the referenced advisory for further information.

Mandriva Linux has released security advisory MDKSA-2005:205 with fixes addressing this and other issues. Users are advised to see the referenced advisory for details on obtaining and applying the appropriate updates.

Conectiva Linux has released security advisory CLSA-2005:1044 addressing this issue. Please see the referenced advisory for details on obtaining and applying the appropriate updates.

The vendor has released version 0.87.1 of ClamAV to address this issue:


Clam Anti-Virus ClamAV 0.51

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.52

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.53

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.54

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.60

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.65

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.67

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.68

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.68 -1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.70

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.75.1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Mandriva clamav-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV 0.80 rc4

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc3

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.80 rc2

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.81

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.82

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.83

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Mandriva clamav-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV 0.84

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Debian clamav-base_0.84-2.sarge.6_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.84 -2.sarge.6_all.deb


• Debian clamav-daemon_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_amd64.deb


• Debian clamav-daemon_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_arm.deb


• Debian clamav-daemon_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_hppa.deb


• Debian clamav-daemon_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_i386.deb


• Debian clamav-daemon_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_ia64.deb


• Debian clamav-daemon_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_m68k.deb


• Debian clamav-daemon_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_mips.deb


• Debian clamav-daemon_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_mipsel.deb


• Debian clamav-daemon_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_powerpc.deb


• Debian clamav-daemon_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_s390.deb


• Debian clamav-daemon_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_sparc.deb


• Debian clamav-freshclam_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_amd64.deb


• Debian clamav-freshclam_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_arm.deb


• Debian clamav-freshclam_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_hppa.deb


• Debian clamav-freshclam_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_i386.deb


• Debian clamav-freshclam_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_ia64.deb


• Debian clamav-freshclam_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_m68k.deb


• Debian clamav-freshclam_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_mips.deb


• Debian clamav-freshclam_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_mipsel.deb


• Debian clamav-freshclam_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_powerpc.deb


• Debian clamav-freshclam_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_s390.deb


• Debian clamav-freshclam_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_sparc.deb


• Debian clamav-milter_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_alpha.deb


• Debian clamav-milter_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_amd64.deb


• Debian clamav-milter_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_arm.deb


• Debian clamav-milter_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_hppa.deb


• Debian clamav-milter_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_i386.deb


• Debian clamav-milter_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_ia64.deb


• Debian clamav-milter_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_m68k.deb


• Debian clamav-milter_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_mips.deb


• Debian clamav-milter_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_mipsel.deb


• Debian clamav-milter_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_powerpc.deb


• Debian clamav-milter_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_s390.deb


• Debian clamav-milter_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_sparc.deb


• Debian clamav-testfiles_0.84-2.sarge.6_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.84-2.sarge.6_all.deb


• Debian clamav_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_amd64.deb


• Debian clamav_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_arm.deb


• Debian clamav_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_hppa.deb


• Debian clamav_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_i386.deb


• Debian clamav_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_ia64.deb


• Debian clamav_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_m68k.deb


• Debian clamav_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_mips.deb


• Debian clamav_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_mipsel.deb


• Debian clamav_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_powerpc.deb


• Debian clamav_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_s390.deb


• Debian clamav_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_sparc.deb

Clam Anti-Virus ClamAV 0.84 rc1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.84 rc2

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Debian clamav-daemon_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_alpha.deb


• Debian clamav-docs_0.84-2.sarge.6_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.84 -2.sarge.6_all.deb


• Debian clamav-freshclam_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_alpha.deb


• Debian clamav_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_alpha.deb

Clam Anti-Virus ClamAV 0.85

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.85.1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Conectiva clamav-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-0.87.1-70136U10_12c l.i386.rpm


• Conectiva clamav-database-0.87.1.20050625-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-database-0.87.1.200 50625-70136U10_12cl.i386.rpm


• Conectiva libclamav-devel-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-0.87.1-701 36U10_12cl.i386.rpm


• Conectiva libclamav-devel-static-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-static-0.8 7.1-70136U10_12cl.i386.rpm


• Conectiva libclamav1-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav1-0.87.1-70136U10 _12cl.i386.rpm

Clam Anti-Virus ClamAV 0.86 .1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.86

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.86.2

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d

Clam Anti-Virus ClamAV 0.87

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Mandriva clamav-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV FSG File Handling Buffer Overflow Vulnerability

References:

• ClamAV Homepage (Clam Anti-Virus)
  
• Release Name: 0.87.1 (Clam Anti-Virus)
  
• ZDI-05-002 Clam Antivirus Remote Code Execution (3Com)
  
• ZDI-05-002: Clam Antivirus Remote Code Execution ([email protected])