ClamAV 'cli_check_jpeg_exploit' Function Malformed JPEG File Remote Denial Of Service Vulnerability

Bugtraq ID:	32555
Class:	Boundary Condition Error
CVE:	CVE-2008-5314
Remote:	Yes
Local:	No
Published:	Dec 01 2008 12:00AM
Updated:	Feb 13 2009 03:38PM
Credit:	Ilja Van Sprundel
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SuSE Linux 11 SuSE Linux 10.3 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Kolab Kolab Groupware Server 2.2 Kolab Kolab Groupware Server 2.1 Kolab Kolab Groupware Server 2.0.4 Kolab Kolab Groupware Server 2.0.3 Kolab Kolab Groupware Server 2.0.2 Kolab Kolab Groupware Server 2.0.1 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Clam Anti-Virus ClamAV 0.94.1 Clam Anti-Virus ClamAV 0.93.1 Clam Anti-Virus ClamAV 0.94 Clam Anti-Virus ClamAV 0.93 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11
Not Vulnerable:	Clam Anti-Virus ClamAV 0.94.2

ClamAV 'cli_check_jpeg_exploit' Function Malformed JPEG File Remote Denial Of Service Vulnerability

ClamAV is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Versions prior to ClamAV 0.94.2 are vulnerable.

ClamAV 'cli_check_jpeg_exploit' Function Malformed JPEG File Remote Denial Of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/32555.c

ClamAV 'cli_check_jpeg_exploit' Function Malformed JPEG File Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva clamav-0.94.2-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.2-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.2-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb

Mandriva Linux Mandrake 2008.1

• Mandriva clamav-0.94.2-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.2-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.2-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu clamav-base_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.2-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-daemon_0.94.dfsg.2-1 ubuntu0.1_powerpc.deb


• Ubuntu clamav-dbg_0.94.dfsg.2-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-dbg_0.94.dfsg.2-1ubu ntu0.1_powerpc.deb


• Ubuntu clamav-docs_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.2-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-freshclam_0.94.dfsg. 2-1ubuntu0.1_powerpc.deb


• Ubuntu clamav-milter_0.94.dfsg.2-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/c/clamav/clamav-milter_0.94.dfsg .2-1ubuntu0.1_powerpc.deb


• Ubuntu clamav-testfiles_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.2-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav_0.94.dfsg.2-1ubuntu0 .1_powerpc.deb


• Ubuntu libclamav-dev_0.94.dfsg.2-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav-dev_0.94.dfsg.2-1 ubuntu0.1_powerpc.deb


• Ubuntu libclamav5_0.94.dfsg.2-1ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav5_0.94.dfsg.2-1ubu ntu0.1_powerpc.deb

Debian Linux 4.0 powerpc

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_powerpc.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_powerpc.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_powerpc.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_powerpc.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_powerpc.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_powerpc.deb


• Debian libclamav2_0.90.1dfsg-4etch16_powerpc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_powerpc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu clamav-base_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.2-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-daemon_0.9 4.dfsg.2-1ubuntu0.1_i386.deb


• Ubuntu clamav-dbg_0.94.dfsg.2-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-dbg_0.94.d fsg.2-1ubuntu0.1_i386.deb


• Ubuntu clamav-docs_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.2-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-freshclam_ 0.94.dfsg.2-1ubuntu0.1_i386.deb


• Ubuntu clamav-milter_0.94.dfsg.2-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-milter _0.94.dfsg.2-1ubuntu0.1_i386.deb


• Ubuntu clamav-testfiles_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.2-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav_0.94.dfsg. 2-1ubuntu0.1_i386.deb


• Ubuntu libclamav-dev_0.94.dfsg.2-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/libclamav-dev_0.9 4.dfsg.2-1ubuntu0.1_i386.deb


• Ubuntu libclamav5_0.94.dfsg.2-1ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/libclamav5_0.94.d fsg.2-1ubuntu0.1_i386.deb

Debian Linux 4.0 m68k

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva clamav-0.94.2-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.2-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.2-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.0

• Mandriva clamav-0.94.2-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.2-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.2-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu clamav-base_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.2-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-daemon_0.94.dfsg.2-1 ubuntu0.1_lpia.deb


• Ubuntu clamav-dbg_0.94.dfsg.2-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-dbg_0.94.dfsg.2-1ubu ntu0.1_lpia.deb


• Ubuntu clamav-docs_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.2-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-freshclam_0.94.dfsg. 2-1ubuntu0.1_lpia.deb


• Ubuntu clamav-milter_0.94.dfsg.2-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/c/clamav/clamav-milter_0.94.dfsg .2-1ubuntu0.1_lpia.deb


• Ubuntu clamav-testfiles_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.2-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav_0.94.dfsg.2-1ubuntu0 .1_lpia.deb


• Ubuntu libclamav-dev_0.94.dfsg.2-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav-dev_0.94.dfsg.2-1 ubuntu0.1_lpia.deb


• Ubuntu libclamav5_0.94.dfsg.2-1ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav5_0.94.dfsg.2-1ubu ntu0.1_lpia.deb

Debian Linux 4.0 amd64

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_amd64.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_amd64.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_amd64.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_amd64.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_amd64.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_amd64.deb


• Debian libclamav2_0.90.1dfsg-4etch16_amd64.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_amd64.deb

Debian Linux 4.0 ia-32

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_i386.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_i386.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_i386.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_i386.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_i386.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_i386.deb


• Debian libclamav2_0.90.1dfsg-4etch16_i386.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_i386.deb

Debian Linux 4.0 hppa

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_hppa.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_hppa.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_hppa.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_hppa.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_hppa.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_hppa.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_hppa.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_hppa.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_hppa.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_hppa.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_hppa.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_hppa.deb


• Debian libclamav2_0.90.1dfsg-4etch16_hppa.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_hppa.deb

Debian Linux 4.0 sparc

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_sparc.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_sparc.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_sparc.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_sparc.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_sparc.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_sparc.deb


• Debian libclamav2_0.90.1dfsg-4etch16_sparc.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_sparc.deb

Debian Linux 4.0 s/390

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_s390.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_s390.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_s390.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_s390.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_s390.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_s390.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_s390.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_s390.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_s390.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_s390.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_s390.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_s390.deb


• Debian libclamav2_0.90.1dfsg-4etch16_s390.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_s390.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu clamav-base_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.2-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-daemon_0.94.dfsg.2-1 ubuntu0.1_sparc.deb


• Ubuntu clamav-dbg_0.94.dfsg.2-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-dbg_0.94.dfsg.2-1ubu ntu0.1_sparc.deb


• Ubuntu clamav-docs_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.2-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav-freshclam_0.94.dfsg. 2-1ubuntu0.1_sparc.deb


• Ubuntu clamav-milter_0.94.dfsg.2-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/clamav/clamav-milter_0.94.dfsg .2-1ubuntu0.1_sparc.deb


• Ubuntu clamav-testfiles_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.2-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/clamav_0.94.dfsg.2-1ubuntu0 .1_sparc.deb


• Ubuntu libclamav-dev_0.94.dfsg.2-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav-dev_0.94.dfsg.2-1 ubuntu0.1_sparc.deb


• Ubuntu libclamav5_0.94.dfsg.2-1ubuntu0.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/clamav/libclamav5_0.94.dfsg.2-1ubu ntu0.1_sparc.deb

Mandriva Linux Mandrake 2009.0

• Mandriva clamav-0.94.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.2-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 alpha

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_alpha.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_alpha.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_alpha.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_alpha.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_alpha.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_alpha.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_alpha.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_alpha.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_alpha.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_alpha.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_alpha.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_alpha.deb


• Debian libclamav2_0.90.1dfsg-4etch16_alpha.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_alpha.deb

MandrakeSoft Corporate Server 4.0

• Mandriva clamav-0.94.2-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.2-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.2-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva clamav-0.94.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.2-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 mipsel

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu clamav-base_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-base_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-daemon_0.94.dfsg.2-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-daemon_0.9 4.dfsg.2-1ubuntu0.1_amd64.deb


• Ubuntu clamav-dbg_0.94.dfsg.2-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-dbg_0.94.d fsg.2-1ubuntu0.1_amd64.deb


• Ubuntu clamav-docs_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-docs_0.94. dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav-freshclam_0.94.dfsg.2-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav-freshclam_ 0.94.dfsg.2-1ubuntu0.1_amd64.deb


• Ubuntu clamav-milter_0.94.dfsg.2-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-milter _0.94.dfsg.2-1ubuntu0.1_amd64.deb


• Ubuntu clamav-testfiles_0.94.dfsg.2-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/clamav/clamav-testfi les_0.94.dfsg.2-1ubuntu0.1_all.deb


• Ubuntu clamav_0.94.dfsg.2-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/clamav_0.94.dfsg. 2-1ubuntu0.1_amd64.deb


• Ubuntu libclamav-dev_0.94.dfsg.2-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/libclamav-dev_0.9 4.dfsg.2-1ubuntu0.1_amd64.deb


• Ubuntu libclamav5_0.94.dfsg.2-1ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/clamav/libclamav5_0.94.d fsg.2-1ubuntu0.1_amd64.deb

Debian Linux 4.0 ia-64

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_ia64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_ia64.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_ia64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_ia64.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_ia64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_ia64.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_ia64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_ia64.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_ia64.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_ia64.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_ia64.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_ia64.deb


• Debian libclamav2_0.90.1dfsg-4etch16_ia64.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_ia64.deb

Debian Linux 4.0 mips

• Debian clamav-base_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-base_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-daemon_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-daemon_0. 90.1dfsg-4etch16_mips.deb


• Debian clamav-dbg_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-dbg_0.90. 1dfsg-4etch16_mips.deb


• Debian clamav-docs_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-docs_0.90 .1dfsg-4etch16_all.deb


• Debian clamav-freshclam_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-freshclam _0.90.1dfsg-4etch16_mips.deb


• Debian clamav-milter_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-milter_0. 90.1dfsg-4etch16_mips.deb


• Debian clamav-testfiles_0.90.1dfsg-4etch16_all.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav-testfiles _0.90.1dfsg-4etch16_all.deb


• Debian clamav_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/clamav_0.90.1dfs g-4etch16_mips.deb


• Debian libclamav-dev_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav-dev_0. 90.1dfsg-4etch16_mips.deb


• Debian libclamav2_0.90.1dfsg-4etch16_mips.deb
  http://security.debian.org/pool/updates/main/c/clamav/libclamav2_0.90. 1dfsg-4etch16_mips.deb

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Ti ger_PPC_


• Apple SecUpdSrvr2009-001Univ.dmg
  Universal
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Un iversal_

Apple Mac OS X Server 10.5.6

• Apple SecUpdSrvr2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Le opard_

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva clamav-0.94.2-0.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-0.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-0.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.2-0.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.2-0.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0

• Mandriva clamav-0.94.2-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav-devel-0.94.2-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libclamav5-0.94.2-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva clamav-0.94.2-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamav-db-0.94.2-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva clamd-0.94.2-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav-devel-0.94.2-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64clamav5-0.94.2-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

ClamAV 'cli_check_jpeg_exploit' Function Malformed JPEG File Remote Denial Of Service Vulnerability

References:

• ClamAV 0.94.2 Changelog (Clam Anti-Virus)
  
• ClamAV Bugzilla Bug 1266 (Ilja Van Sprundel)
  
• ClamAV Homepage (Clam Anti-Virus)
  
• Kolab Security Issue 23 20081202 (Kolab)