Xorl

**Name of the Vulnerable Software and Affected Versions** ClamAV versions prior to 0.96.5 **Description** The issue is related to an off-by-one error in the icon cb function in pe icons.c in libclamav. This error can be exploited by remote attackers to cause a denial of service, resulting in memory corruption and application crash, or potentially execute arbitrary code. **Recommendations** For versions prior to 0.96.5, update to version 0.96.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the icon cb function in pe icons.c until the update is applied.

**Name of the Vulnerable Software and Affected Versions** ClamAV versions prior to 0.96.5 **Description** The issue is related to a crafted PDF document that can cause a denial of service or possibly execute arbitrary code. **Recommendations** For versions prior to 0.96.5, update to version 0.96.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.31.5 **Description** The issue allows local users to bypass intended access restrictions and gain privileges via calls to functions in certain subsystems, including `uvesafb`, `pohmelfs`, `dst`, and `dm`. This is due to the connector layer not requiring the `CAP SYS ADMIN` capability for interaction with these subsystems. **Recommendations** For Linux kernel versions prior to 2.6.31.5, update to version 2.6.31.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 2.6.30.2 **Description** The issue allows local users to cause a denial of service, specifically a NULL pointer dereference, through vectors related to "suspend * sysfs attributes" and the `suspend lo store` or `suspend hi store` functions. This is only considered a vulnerability when sysfs is writable by an attacker. **Recommendations** For Linux kernel versions prior to 2.6.30.2, update to version 2.6.30.2 or later to resolve the issue. As a temporary workaround, consider restricting write access to sysfs to prevent exploitation.