CVE-2010-0098
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.9%
ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities.
Produtos afetados
n/a · n/aReferências
http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.htmlhttp://secunia.com/advisories/39293http://secunia.com/advisories/39329http://secunia.com/advisories/39656http://support.apple.com/kb/HT4312https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1826http://www.mandriva.com/security/advisories?name=MDVSA-2010:082http://www.openwall.com/lists/oss-security/2010/04/06/4http://www.openwall.com/lists/oss-security/2010/04/08/3http://www.securityfocus.com/bid/39262