ClamAV CVE-2013-2021 Remote Code Execution Vulnerability

Bugtraq ID:	60118
Class:	Unknown
CVE:	CVE-2013-2021
Remote:	Yes
Local:	No
Published:	Apr 23 2013 12:00AM
Updated:	Apr 16 2015 05:43PM
Credit:	David Raynor
Vulnerable:	Ubuntu Ubuntu Linux 10.04 LTS MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 ifenslave ifenslave 0.88 Gentoo Linux Clam Anti-Virus ClamAV 0.96.5 Clam Anti-Virus ClamAV 0.96.4 Clam Anti-Virus ClamAV 0.96.3 Clam Anti-Virus ClamAV 0.96.2 Clam Anti-Virus ClamAV 0.96.1 Clam Anti-Virus ClamAV 0.95.2 Clam Anti-Virus ClamAV 0.95.1 Clam Anti-Virus ClamAV 0.94.2 Clam Anti-Virus ClamAV 0.94.1 Clam Anti-Virus ClamAV 0.93.3 Clam Anti-Virus ClamAV 0.93.1 Clam Anti-Virus ClamAV 0.92.1 Clam Anti-Virus ClamAV 0.91.2 Clam Anti-Virus ClamAV 0.91.1 Clam Anti-Virus ClamAV 0.90.3 Clam Anti-Virus ClamAV 0.90.2 Clam Anti-Virus ClamAV 0.90.1 + Debian Linux 4.0 sparc + Debian Linux 4.0 s/390 + Debian Linux 4.0 powerpc + Debian Linux 4.0 mipsel + Debian Linux 4.0 mips + Debian Linux 4.0 m68k + Debian Linux 4.0 ia-64 + Debian Linux 4.0 ia-32 + Debian Linux 4.0 hppa + Debian Linux 4.0 arm + Debian Linux 4.0 amd64 + Debian Linux 4.0 alpha + Debian Linux 4.0 Clam Anti-Virus ClamAV 0.90 - MandrakeSoft Corporate Server 4.0 x86_64 - MandrakeSoft Corporate Server 3.0 x86_64 - MandrakeSoft Corporate Server 3.0 - MandrakeSoft Corporate Server 4.0 - Mandriva Linux Mandrake 2007.1 x86_64 - Mandriva Linux Mandrake 2007.1 - Mandriva Linux Mandrake 2007.0 x86_64 - Mandriva Linux Mandrake 2007.0 Clam Anti-Virus ClamAV 0.88.5 Clam Anti-Virus ClamAV 0.88.4 Clam Anti-Virus ClamAV 0.88.3 Clam Anti-Virus ClamAV 0.88.2 Clam Anti-Virus ClamAV 0.88.1 Clam Anti-Virus ClamAV 0.87.1 Clam Anti-Virus ClamAV 0.87 -1 Clam Anti-Virus ClamAV 0.87 Clam Anti-Virus ClamAV 0.86.2 Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.85.1 Clam Anti-Virus ClamAV 0.85 Clam Anti-Virus ClamAV 0.84 rc2 Clam Anti-Virus ClamAV 0.84 rc1 Clam Anti-Virus ClamAV 0.84 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 Clam Anti-Virus ClamAV 0.83 Clam Anti-Virus ClamAV 0.82 Clam Anti-Virus ClamAV 0.81 + Gentoo Linux Clam Anti-Virus ClamAV 0.80 rc4 Clam Anti-Virus ClamAV 0.80 rc3 Clam Anti-Virus ClamAV 0.80 rc2 Clam Anti-Virus ClamAV 0.80 rc1 Clam Anti-Virus ClamAV 0.80 Clam Anti-Virus ClamAV 0.75.1 Clam Anti-Virus ClamAV 0.70 Clam Anti-Virus ClamAV 0.68 -1 Clam Anti-Virus ClamAV 0.68 Clam Anti-Virus ClamAV 0.67 + Gentoo Linux 1.4 _rc3 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 + Gentoo Linux 1.4 Clam Anti-Virus ClamAV 0.65 Clam Anti-Virus ClamAV 0.60 Clam Anti-Virus ClamAV 0.54 Clam Anti-Virus ClamAV 0.53 Clam Anti-Virus ClamAV 0.52 Clam Anti-Virus ClamAV 0.51 Clam Anti-Virus ClamAV 0.97.3 Clam Anti-Virus ClamAV 0.97.2 Clam Anti-Virus ClamAV 0.97 Clam Anti-Virus ClamAV 0.96 Clam Anti-Virus ClamAV 0.95 Clam Anti-Virus ClamAV 0.94 Clam Anti-Virus ClamAV 0.93 Clam Anti-Virus ClamAV 0.92 Clam Anti-Virus ClamAV 0.91 Clam Anti-Virus ClamAV 0.88.6 Clam Anti-Virus Antivirus 0.96.4 Apple Mac Os X Server 10.6.8
Not Vulnerable:

ClamAV CVE-2013-2021 Remote Code Execution Vulnerability

ClamAV is prone to a remote code-execution vulnerability.

Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of affected application.

ClamAV versions prior to 0.97.8 are vulnerable.

Note: This issue was previously discussed in BID 59434 (ClamAV Multiple Remote Code Execution and Denial of Service Vulnerabilities), but has been moved to its own record for better documentation.

ClamAV CVE-2013-2021 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ClamAV CVE-2013-2021 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ClamAV CVE-2013-2021 Remote Code Execution Vulnerability

References: