ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
BID:43555
Info
ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
| Bugtraq ID: | 43555 |
| Class: | Design Error |
| CVE: |
CVE-2010-3434 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 22 2010 12:00AM |
| Updated: | Mar 19 2015 09:16AM |
| Credit: | Herbert Gasiorowski |
| Vulnerable: |
SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Gentoo Linux Clam Anti-Virus ClamAV 0.96.2 Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 |
| Not Vulnerable: | |
Discussion
ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
ClamAV is prone to a denial-of-service vulnerability because it fails to properly bounds-check specially crafted PDF files.
An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.
ClamAV 0.96.2 is vulnerable; other versions may also be affected.
ClamAV is prone to a denial-of-service vulnerability because it fails to properly bounds-check specially crafted PDF files.
An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.
ClamAV 0.96.2 is vulnerable; other versions may also be affected.
Exploit / POC
ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
The reporter has provided a PDF file to the vendor that demonstrates this issue. This file may not be publicly available.
The reporter has provided a PDF file to the vendor that demonstrates this issue. This file may not be publicly available.
Solution / Fix
ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X Server 10.6
Apple Mac OS X Server 10.5.8
Apple Mac OS X Server 10.6.1
Apple Mac OS X Server 10.6.2
Apple Mac OS X Server 10.6.3
Apple Mac OS X Server 10.6.4
Apple Mac OS X Server 10.6.5
Apple Mac OS X Server 10.6.6
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X Server 10.6
-
Apple MacOSXServerUpdCombo10.6.7.dmg
For Mac OS X Server v10.6 - v10.6.5
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.5.8
-
Apple SecUpdSrvr2011-001.dmg
For Mac OS X Server v10.5.8
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.1
-
Apple MacOSXServerUpdCombo10.6.7.dmg
For Mac OS X Server v10.6 - v10.6.5
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.2
-
Apple MacOSXServerUpdCombo10.6.7.dmg
For Mac OS X Server v10.6 - v10.6.5
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.3
-
Apple MacOSXServerUpdCombo10.6.7.dmg
For Mac OS X Server v10.6 - v10.6.5
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.4
-
Apple MacOSXServerUpdCombo10.6.7.dmg
For Mac OS X Server v10.6 - v10.6.5
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.5
-
Apple MacOSXServerUpdCombo10.6.7.dmg
For Mac OS X Server v10.6 - v10.6.5
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.6.6
-
Apple MacOSXServerUpd10.6.7.dmg
For Mac OS X Server v10.6.6
http://www.apple.com/support/downloads/
References
ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
References:
References:
- Add missing boundscheck to pdf code (bb #2226). (Torok Edvin)
- Bug 2226 - segmentation fault on an invalid pdf document (Herbert Gasiorowski)
- ClamAV Homepage (Clam Anti-Virus)
- CVE request: clamav < 0.96.3 pdf bounds checking (Hanno Bock)