On Mon, Dec 23, 2013 at 11:23 AM, gin(e) <[email protected]> wrote: > On 12/23/2013 04:55 PM, David Raynor wrote: > > ClamAV is scanning the Flash file and is finding a tag that has a length > > that is too long for the file. This would most commonly occur if file is > > truncated. > > yes, it's written here too: > http://lurker.clamav.net/message/20131002.164725.9f59324b.en.html > > But why "file" programm doesn't say that? I have pasted the output for > that reason. > > Is it possible that a truncated swf works? > > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml >
file does type detection, not type validation. As for possible that it works? Yes, it's possible. Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team [email protected] _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
