Description
Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | clamav | 0.95+dfsg-1 | — |
| Debian 13 | clamav | 0.95+dfsg-1 | — |
| Debian 12 | clamav | 0.95+dfsg-1 | — |
References
- MDVSA-2009:097 vendor-advisory
- ADV-2009-0934 vdb-entry
- 34344 vdb-entry
- 20090402 [TZO-05-2009] Clamav 0.94 and below - Evasion /bypass mailing-list
- APPLE-SA-2009-09-10-2 vendor-advisory
- http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.html
- [oss-security] 20090407 Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive mailing-list
- http://support.apple.com/kb/HT3865
- 36701 third-party-advisory
- SUSE-SR:2009:009 vendor-advisory