PT-2005-3359
CVE-2005-2450
·
Publicado
2005-08-03
·
Atualizado
2017-07-11
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Clam AntiVirus (ClamAV) versions 0.86.1 and earlier
Description
The issue is related to multiple integer overflows in file format processors for TNEF, CHM, or FSG files in libclamav. This allows remote attackers to gain privileges via a crafted e-mail message.
Recommendations
For Clam AntiVirus (ClamAV) versions 0.86.1 and earlier, update to a version later than 0.86.1 to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾