CVE-2005-2450

Sažetak

Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

Reference

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987
http://marc.info/?l=bugtraq&m=112230864412932&w=2
http://secunia.com/advisories/16180
http://secunia.com/advisories/16229
http://secunia.com/advisories/16250
http://secunia.com/advisories/16296
http://secunia.com/advisories/16458
http://security.gentoo.org/glsa/glsa-200507-25.xml
http://sourceforge.net/project/shownotes.php?release_id=344514
http://www.novell.com/linux/security/advisories/2005_18_sr.html
http://www.osvdb.org/18257
http://www.osvdb.org/18258
http://www.osvdb.org/18259
http://www.securityfocus.com/bid/14359
https://exchange.xforce.ibmcloud.com/vulnerabilities/21555

CVSS

Base:	7.5
Impact:	6.4
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

11-07-2017 - 01:32

Objavljeno

03-08-2005 - 04:00