HTTP: ClamAV CHM File Handling Integer Overflow

This signature detects attempts to exploit a known vulnerability in the ClamAV. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the process.

Extended Description

ClamAV is susceptible to multiple integer overflow vulnerabilities. Specifically, the vulnerabilities present themselves when the ClamAV antivirus library handles malformed files. This may allow attackers to control the flow of execution, and potentially execute attacker-supplied code in the context of the affected application. ClamAV 0.86.1 and prior versions are reported to be affected.

Affected Products

Conectiva linux

References

BugTraq: 14359

CVE: CVE-2005-2450

Short Name

HTTP:STC:DL:CLAMAV-INT

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: ClamAV CHM File Handling Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?