[IVIZ-08-011] ClamAV lzh unpacking segmentation fault
Date: Wed, 10 Dec 2008 17:18:40 +0530
From: "iViZ Security Advisories" <advisories@ivizsecurity.com.>
To: [email protected], [email protected]
Subject: [IVIZ-08-011] ClamAV lzh unpacking segmentation fault
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Google-Sender-Auth: aea33a95bc981639
X-Virus-Scanned: antivirus-gw at tyumen.ru
-----------------------------------------------------------------------
[ iViZ Security Advisory 08-011 10/12/2008 ]
iViZ Techno Solutions Pvt. Ltd.
http://www.ivizsecurity.com
* Title: ClamAV lzh unpacking segmentation fault
* Date: 10/12/2008
* Software: ClamAV 0.93.3 and prior
--[ Synopsis:
Clamav uses an external unpacker, which can be deterministically crashed,
when processing corrupted LZH files.
--[ Affected Software:
* ClamAV 0.93.3 and prior
--[ Non Affected Software:
* ClamAV 0.94 and newer
--[ Impact:
Remote DoS, possibly remote code execution.
--[ Vendor response:
* "Support for external unpackers has been dropped in 0.94 for
security issues".
--[ Credits:
This vulnerability was discovered by Security Researcher
Jonathan Brossard from iViZ Techno Solutions Pvt. Ltd.
--[ Disclosure timeline:
* First private disclosure to vendor on October 14th 2008
* First vendor reply on October 15th 2008 : issue fixed.
--[ Reference:
http://www.ivizsecurity.com/security-advisory.html
