-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Steven,
Please assign CVEs for the following public vulnerabilities in clamav: REFERENCE: IDEF1169 URL: http://www.blacksheepnetworks.com/security/security/fulldisc/1169.html A possible denial of service has been found in the libclamav/tnef.c code of clamav. REFERENCE: IDEF1180 URL: http://www.blacksheepnetworks.com/security/security/fulldisc/1180.html A possible denial of service has been found in the libclamav/mspack/cabd.c of clamav. REFERENCE: ZDI-CAN-004 URL: http://cvs.sourceforge.net/viewcvs.py/clamav/clamav-devel/libclamav/fsg.c?rev=1.8&view=markup The buffer size calculation code in clamav could be by-passed due to a vulnerability in libclamav/fsg.c. Thanks, Micah -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFDatcQ9n4qXRzy1ioRAueOAKCGF7R8/Rs4LSg5Cc32aPfWuc/0ewCgsVm3 HHkkVTzbRzP9ua2jv+gyTR8= =umHD -----END PGP SIGNATURE----- _______________________________________________ Secure-testing-team mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/secure-testing-team
