Clam Anti-Virus ClamAV UPX Compressed File Heap Buffer Overflow Vulnerability

Bugtraq ID:	16191
Class:	Boundary Condition Error
CVE:	CVE-2006-0162
Remote:	Yes
Local:	No
Published:	Jan 09 2006 12:00AM
Updated:	Aug 15 2006 05:40PM
Credit:	An anonymous researcher discovered this issue.
Vulnerable:	Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Enterprise Linux 2.0 SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21 + Linux kernel 2.4.19 SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 Mandriva Linux Mandrake 10.1 x86_64 Mandriva Linux Mandrake 10.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 Clam Anti-Virus ClamAV 0.87.1 Clam Anti-Virus ClamAV 0.87 -1 Clam Anti-Virus ClamAV 0.87 Clam Anti-Virus ClamAV 0.86.2 Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.85.1 Clam Anti-Virus ClamAV 0.85 Clam Anti-Virus ClamAV 0.84 rc2 Clam Anti-Virus ClamAV 0.84 rc1 Clam Anti-Virus ClamAV 0.84 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 Clam Anti-Virus ClamAV 0.83 Clam Anti-Virus ClamAV 0.82 Clam Anti-Virus ClamAV 0.81 + Gentoo Linux Clam Anti-Virus ClamAV 0.80 rc4 Clam Anti-Virus ClamAV 0.80 rc3 Clam Anti-Virus ClamAV 0.80 rc2 Clam Anti-Virus ClamAV 0.80 rc1 Clam Anti-Virus ClamAV 0.80 Clam Anti-Virus ClamAV 0.75.1 Clam Anti-Virus ClamAV 0.70 Clam Anti-Virus ClamAV 0.68 -1 Clam Anti-Virus ClamAV 0.68 Clam Anti-Virus ClamAV 0.67 Clam Anti-Virus ClamAV 0.65 Clam Anti-Virus ClamAV 0.60 Clam Anti-Virus ClamAV 0.54 Clam Anti-Virus ClamAV 0.53 Clam Anti-Virus ClamAV 0.52 Clam Anti-Virus ClamAV 0.51
Not Vulnerable:	ifenslave ifenslave 0.88 Clam Anti-Virus ClamAV 0.87.1

Clam Anti-Virus ClamAV UPX Compressed File Heap Buffer Overflow Vulnerability

ClamAV is prone to a heap buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

This issue occurs when the application attempts to handle compressed UPX files.

Exploitation of this issue could allow attacker-supplied machine code to be executed in the context of the affected application. The issue would occur when the malformed file is scanned manually or automatically in deployments such as email gateways.

Clam Anti-Virus ClamAV UPX Compressed File Heap Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Clam Anti-Virus ClamAV UPX Compressed File Heap Buffer Overflow Vulnerability

Solution:
Please see the referenced advisories for information on obtaining fixes.


Clam Anti-Virus ClamAV 0.51

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.52

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.53

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.60

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.65

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.68

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.70

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.75.1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download


• Mandriva clamav-0.88-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.88-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-0.88-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-devel-0.88-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-0.88-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-devel-0.88-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.101mdk.x86_64.rpm
  Mandriva Linux 10.1/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV 0.80 rc4

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.80

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.80 rc3

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.80 rc1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.80 rc2

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.81

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.82

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.83

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download


• Mandriva clamav-0.88-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.88-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-0.88-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-devel-0.88-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-0.88-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-devel-0.88-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.102mdk.x86_64.rpm
  Mandriva Linux 10.2/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV 0.84

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download


• Debian clamav-daemon_0.84-2.sarge.7_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.7_arm.deb


• Debian clamav-freshclam_0.84-2.sarge.7_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.7_arm.deb


• Debian clamav-milter_0.84-2.sarge.7_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.7_arm.deb


• Debian clamav_0.84-2.sarge.7_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.7_arm.deb


• Debian libclamav-dev_0.84-2.sarge.7_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 84-2.sarge.7_arm.deb


• Debian libclamav1_0.84-2.sarge.7_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/libclamav1_0.84- 2.sarge.7_arm.deb


• Debian clamav-base_0.84-2.sarge.6_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.84 -2.sarge.6_all.deb


• Debian clamav-daemon_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_amd64.deb


• Debian clamav-daemon_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_arm.deb


• Debian clamav-daemon_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_hppa.deb


• Debian clamav-daemon_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_i386.deb


• Debian clamav-daemon_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_ia64.deb


• Debian clamav-daemon_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_m68k.deb


• Debian clamav-daemon_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_mips.deb


• Debian clamav-daemon_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_mipsel.deb


• Debian clamav-daemon_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_powerpc.deb


• Debian clamav-daemon_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_s390.deb


• Debian clamav-daemon_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_sparc.deb


• Debian clamav-freshclam_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_amd64.deb


• Debian clamav-freshclam_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_arm.deb


• Debian clamav-freshclam_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_hppa.deb


• Debian clamav-freshclam_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_i386.deb


• Debian clamav-freshclam_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_ia64.deb


• Debian clamav-freshclam_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_m68k.deb


• Debian clamav-freshclam_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_mips.deb


• Debian clamav-freshclam_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_mipsel.deb


• Debian clamav-freshclam_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_powerpc.deb


• Debian clamav-freshclam_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_s390.deb


• Debian clamav-freshclam_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_sparc.deb


• Debian clamav-milter_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_alpha.deb


• Debian clamav-milter_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_amd64.deb


• Debian clamav-milter_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_arm.deb


• Debian clamav-milter_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_hppa.deb


• Debian clamav-milter_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_i386.deb


• Debian clamav-milter_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_ia64.deb


• Debian clamav-milter_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_m68k.deb


• Debian clamav-milter_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_mips.deb


• Debian clamav-milter_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_mipsel.deb


• Debian clamav-milter_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_powerpc.deb


• Debian clamav-milter_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_s390.deb


• Debian clamav-milter_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 84-2.sarge.6_sparc.deb


• Debian clamav-testfiles_0.84-2.sarge.6_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.84-2.sarge.6_all.deb


• Debian clamav_0.84-2.sarge.6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_amd64.deb


• Debian clamav_0.84-2.sarge.6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_arm.deb


• Debian clamav_0.84-2.sarge.6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_hppa.deb


• Debian clamav_0.84-2.sarge.6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_i386.deb


• Debian clamav_0.84-2.sarge.6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_ia64.deb


• Debian clamav_0.84-2.sarge.6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_m68k.deb


• Debian clamav_0.84-2.sarge.6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_mips.deb


• Debian clamav_0.84-2.sarge.6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_mipsel.deb


• Debian clamav_0.84-2.sarge.6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_powerpc.deb


• Debian clamav_0.84-2.sarge.6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_s390.deb


• Debian clamav_0.84-2.sarge.6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_sparc.deb

Clam Anti-Virus ClamAV 0.84 rc2

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download


• Debian clamav-daemon_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 84-2.sarge.6_alpha.deb


• Debian clamav-docs_0.84-2.sarge.6_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.84 -2.sarge.6_all.deb


• Debian clamav-freshclam_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.84-2.sarge.6_alpha.deb


• Debian clamav_0.84-2.sarge.6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.84-2.sa rge.6_alpha.deb

Clam Anti-Virus ClamAV 0.84 rc1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.85

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.85.1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download


• Conectiva clamav-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-0.87.1-70136U10_12c l.i386.rpm


• Conectiva clamav-database-0.87.1.20050625-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/clamav-database-0.87.1.200 50625-70136U10_12cl.i386.rpm


• Conectiva libclamav-devel-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-0.87.1-701 36U10_12cl.i386.rpm


• Conectiva libclamav-devel-static-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav-devel-static-0.8 7.1-70136U10_12cl.i386.rpm


• Conectiva libclamav1-0.87.1-70136U10_12cl.i386.rpm
  Conectiva 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/libclamav1-0.87.1-70136U10 _12cl.i386.rpm

Clam Anti-Virus ClamAV 0.86 .1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.86

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.86.2

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.87

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download


• Mandriva clamav-0.88-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.88-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.88-0.1.C30mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.88-0.1.C30mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.C30mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-db-0.88-0.1.C30mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.C30mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-milter-0.88-0.1.C30mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.C30mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamd-0.88-0.1.C30mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-0.88-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-0.88-0.1.C30mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-devel-0.88-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva lib64clamav1-devel-0.88-0.1.C30mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-0.88-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-0.88-0.1.C30mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-devel-0.88-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva libclamav1-devel-0.88-0.1.C30mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads/


• Mandriva clamav-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV 0.87 -1

• Clam Anti-Virus clamav-0.87.1.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.87.1.tar.gz?downloa d


• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download

Clam Anti-Virus ClamAV 0.87.1

• Clam Anti-Virus clamav-0.88.tar.gz
  http://prdownloads.sourceforge.net/clamav/clamav-0.88.tar.gz?download


• Mandriva clamav-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-db-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamav-milter-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva clamd-0.87.1-0.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3

Clam Anti-Virus ClamAV UPX Compressed File Heap Buffer Overflow Vulnerability

References:

• [DSA 947-2] New clamav packages fix heap overflow (Debian)
  
• ClamAV Homepage (Clam Anti-Virus)
  
• Release Name: 0.87.1 (Clam Anti-Virus)
  
• Release Name: 0.88 (Clam Anti-Virus)
  
• ZDI-05-002 Clam Antivirus Remote Code Execution (3Com)
  
• ZDI-05-002: Clam Antivirus Remote Code Execution ([email protected])
  
• ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability ([email protected])