ClamAV 'get_unicode_name()' Off-By-One Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	32207
Class:	Boundary Condition Error
CVE:	CVE-2008-5050
Remote:	Yes
Local:	No
Published:	Nov 09 2008 12:00AM
Updated:	Feb 13 2009 03:48PM
Credit:	Moritz Jodeit
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 SuSE SUSE Linux Enterprise Server 9 SP3 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 10 SP1 SuSE SUSE Linux Enterprise SDK 10 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE SUSE Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE Linux Professional 10.2 x86_64 SuSE Linux Personal 10.2 x86_64 Stonesoft StoneGate High Availability Firewall and VPN 4.3 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. SUSE Linux Enterprise Server RT Solution 10 0 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. openSUSE 10.1 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Open-Enterprise-Server 1 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux Desktop SDK 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 9 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 10.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 10.2 S.u.S.E. Linux Personal 10.1 S.u.S.E. Linux Enterprise Server 10.SP2 SP S.u.S.E. Linux Enterprise Server 10.SP1 S.u.S.E. Linux Enterprise Server 10 + Linux kernel 2.6.5 S.u.S.E. Linux Enterprise Desktop 10 SP2 S.u.S.E. Linux Enterprise Desktop 10 SP2 S.u.S.E. Linux Enterprise Desktop 10 SP1 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc64 S.u.S.E. Linux 10.1 ppc S.u.S.E. Linux 10.0 x86-64 S.u.S.E. Linux 10.0 x86 S.u.S.E. Linux 10.0 ppc Red Hat Fedora 9 Red Hat Fedora 8 Pardus Linux 2008 0 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Kolab Kolab Groupware Server 2.2 Kolab Kolab Groupware Server 2.1 Kolab Kolab Groupware Server 2.0.4 Kolab Kolab Groupware Server 2.0.3 Kolab Kolab Groupware Server 2.0.2 Kolab Kolab Groupware Server 2.0.1 ifenslave ifenslave 0.88 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Clam Anti-Virus ClamAV 0.93.1 Clam Anti-Virus ClamAV 0.92.1 Clam Anti-Virus ClamAV 0.91.2 Clam Anti-Virus ClamAV 0.91.1 Clam Anti-Virus ClamAV 0.90.3 Clam Anti-Virus ClamAV 0.90.2 Clam Anti-Virus ClamAV 0.90.1 Clam Anti-Virus ClamAV 0.90 - MandrakeSoft Corporate Server 4.0 x86_64 - MandrakeSoft Corporate Server 3.0 x86_64 - MandrakeSoft Corporate Server 3.0 - MandrakeSoft Corporate Server 4.0 - Mandriva Linux Mandrake 2007.1 x86_64 - Mandriva Linux Mandrake 2007.1 - Mandriva Linux Mandrake 2007.0 x86_64 - Mandriva Linux Mandrake 2007.0 Clam Anti-Virus ClamAV 0.88.5 Clam Anti-Virus ClamAV 0.88.4 Clam Anti-Virus ClamAV 0.88.3 Clam Anti-Virus ClamAV 0.88.2 Clam Anti-Virus ClamAV 0.88.1 Clam Anti-Virus ClamAV 0.87.1 Clam Anti-Virus ClamAV 0.87 -1 Clam Anti-Virus ClamAV 0.87 Clam Anti-Virus ClamAV 0.86.2 Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.85.1 Clam Anti-Virus ClamAV 0.85 Clam Anti-Virus ClamAV 0.84 rc2 Clam Anti-Virus ClamAV 0.84 rc1 Clam Anti-Virus ClamAV 0.84 Clam Anti-Virus ClamAV 0.83 Clam Anti-Virus ClamAV 0.82 Clam Anti-Virus ClamAV 0.81 + Gentoo Linux Clam Anti-Virus ClamAV 0.80 rc4 Clam Anti-Virus ClamAV 0.80 rc3 Clam Anti-Virus ClamAV 0.80 rc2 Clam Anti-Virus ClamAV 0.80 rc1 Clam Anti-Virus ClamAV 0.80 Clam Anti-Virus ClamAV 0.75.1 Clam Anti-Virus ClamAV 0.70 Clam Anti-Virus ClamAV 0.68 -1 Clam Anti-Virus ClamAV 0.68 Clam Anti-Virus ClamAV 0.67 + Gentoo Linux 1.4 _rc3 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 + Gentoo Linux 1.4 Clam Anti-Virus ClamAV 0.65 Clam Anti-Virus ClamAV 0.60 Clam Anti-Virus ClamAV 0.54 Clam Anti-Virus ClamAV 0.53 Clam Anti-Virus ClamAV 0.52 Clam Anti-Virus ClamAV 0.51 Clam Anti-Virus ClamAV 0.94 Clam Anti-Virus ClamAV 0.93 Clam Anti-Virus ClamAV 0.92 Clam Anti-Virus ClamAV 0.91 Clam Anti-Virus ClamAV 0.88.6 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11
Not Vulnerable:	Stonesoft StoneGate High Availability Firewall and VPN 4.3.1 Clam Anti-Virus ClamAV 0.94.1

ClamAV 'get_unicode_name()' Off-By-One Heap Based Buffer Overflow Vulnerability

ClamAV is prone to an off-by-one heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to ClamAV 0.94.1 are vulnerable.

ClamAV 'get_unicode_name()' Off-By-One Heap Based Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ClamAV 'get_unicode_name()' Off-By-One Heap Based Buffer Overflow Vulnerability

Solution:
The vendor has released fixes. Please see the references for more information.


Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu clamav-base_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.1-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-daemon_0.94.dfsg.1-1 ubuntu0.1_powerpc.deb


• Ubuntu clamav-dbg_0.94.dfsg.1-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-dbg_0.94.dfsg.1-1ubu ntu0.1_powerpc.deb


• Ubuntu clamav-docs_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.1-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-freshclam_0.94.dfsg. 1-1ubuntu0.1_powerpc.deb


• Ubuntu clamav-milter_0.94.dfsg.1-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/c/clamav/clamav-milter_0.94.dfsg .1-1ubuntu0.1_powerpc.deb


• Ubuntu clamav-testfiles_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.1-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav_0.94.dfsg.1-1ubuntu0 .1_powerpc.deb


• Ubuntu libclamav-dev_0.94.dfsg.1-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav-dev_0.94.dfsg.1-1 ubuntu0.1_powerpc.deb


• Ubuntu libclamav5_0.94.dfsg.1-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav5_0.94.dfsg.1-1ubu ntu0.1_powerpc.deb

Mandriva Linux Mandrake 2008.0

• Mandriva clamav-0.94.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.1-2.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 amd64

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_amd64.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_amd64.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_amd64.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_amd64.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_amd64.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_amd64.deb


• Debian libclamav2_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_amd64.deb

Debian Linux 4.0 ia-32

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_i386.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_i386.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_i386.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_i386.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_i386.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_i386.deb


• Debian libclamav2_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_i386.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu clamav-base_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.1-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-daemon_0.94.dfsg.1-1 ubuntu0.1_sparc.deb


• Ubuntu clamav-dbg_0.94.dfsg.1-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-dbg_0.94.dfsg.1-1ubu ntu0.1_sparc.deb


• Ubuntu clamav-docs_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.1-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-freshclam_0.94.dfsg. 1-1ubuntu0.1_sparc.deb


• Ubuntu clamav-milter_0.94.dfsg.1-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/clamav/clamav-milter_0.94.dfsg .1-1ubuntu0.1_sparc.deb


• Ubuntu clamav-testfiles_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.1-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav_0.94.dfsg.1-1ubuntu0 .1_sparc.deb


• Ubuntu libclamav-dev_0.94.dfsg.1-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav-dev_0.94.dfsg.1-1 ubuntu0.1_sparc.deb


• Ubuntu libclamav5_0.94.dfsg.1-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav5_0.94.dfsg.1-1ubu ntu0.1_sparc.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva clamav-0.94.1-2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.1-2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.1-2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 mips

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_mips.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_mips.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_mips.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_mips.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_mips.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_mips.deb


• Debian libclamav2_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_mips.deb

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva clamav-0.94.1-2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.1-2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.1-2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb

Mandriva Linux Mandrake 2008.1

• Mandriva clamav-0.94.1-2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.1-2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.1-2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_powerpc.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_powerpc.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_powerpc.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_powerpc.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_powerpc.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_powerpc.deb


• Debian libclamav2_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu clamav-base_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.1-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-daemon_0.9 4.dfsg.1-1ubuntu0.1_i386.deb


• Ubuntu clamav-dbg_0.94.dfsg.1-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-dbg_0.94.d fsg.1-1ubuntu0.1_i386.deb


• Ubuntu clamav-docs_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.1-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-freshclam_ 0.94.dfsg.1-1ubuntu0.1_i386.deb


• Ubuntu clamav-milter_0.94.dfsg.1-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-milter _0.94.dfsg.1-1ubuntu0.1_i386.deb


• Ubuntu clamav-testfiles_0.94.dfsg.1-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.1-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.1-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav_0.94.dfsg. 1-1ubuntu0.1_i386.deb


• Ubuntu libclamav-dev_0.94.dfsg.1-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/libclamav-dev_0.9 4.dfsg.1-1ubuntu0.1_i386.deb


• Ubuntu libclamav5_0.94.dfsg.1-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/libclamav5_0.94.d fsg.1-1ubuntu0.1_i386.deb

Debian Linux 4.0 m68k

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb

Debian Linux 4.0 sparc

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_sparc.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_sparc.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_sparc.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_sparc.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_sparc.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_sparc.deb


• Debian libclamav2_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_sparc.deb

Mandriva Linux Mandrake 2009.0

• Mandriva clamav-0.94.1-2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.1-2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.1-2mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Clam Anti-Virus ClamAV 0.91

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.88.6

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva clamav-0.94.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.1-2.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Clam Anti-Virus ClamAV 0.53

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.60

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.65

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.67

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.68 -1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.70

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.80

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.80 rc1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.80 rc2

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.80 rc4

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.81

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.82

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.84 rc1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.84

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.85

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.85.1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.86 .1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.86.2

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.87

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.87 -1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.87.1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

ifenslave ifenslave 0.88

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.88.2

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.88.3

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.88.4

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.88.5

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.90

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.91.1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.92.1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Clam Anti-Virus ClamAV 0.93.1

• Clam Anti-Virus clamav-0.94.1.tar.gz
  http://freshmeat.net/redir/clamav/29355/url_tgz/clamav-0.94.1.tar.gz

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Ti ger_PPC_


• Apple SecUpdSrvr2009-001Univ.dmg
  Universal
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Un iversal_

MandrakeSoft Corporate Server 3.0

• Mandriva clamav-0.94.1-1.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-1.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-1.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.1-1.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.1-1.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva clamav-0.94.1-1.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.1-1.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.1-1.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.1-1.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.1-1.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

ClamAV 'get_unicode_name()' Off-By-One Heap Based Buffer Overflow Vulnerability

References:

• ClamAV Changelog (Clam Anti-Virus)
  
• ClamAV Homepage (Clam Anti-Virus)
  
• ClamAV get_unicode_name() off-by-one buffer overflow (Moritz Jodeit )
  
• Buffer Overflow in Anti-Virus Component of StoneGate UTM Solution (Stonesoft)
  
• Kolab Security Issue 23 20081202 (Kolab)