On Mon, Dec 23, 2013 at 11:23 AM, gin(e) <[email protected]> wrote:

> On 12/23/2013 04:55 PM, David Raynor wrote:
> > ClamAV is scanning the Flash file and is finding a tag that has a length
> > that is too long for the file. This would most commonly occur if file is
> > truncated.
>
> yes, it's written here too:
> http://lurker.clamav.net/message/20131002.164725.9f59324b.en.html
>
> But why "file" programm doesn't say that? I have pasted the output for
> that reason.
>
> Is it possible that a truncated swf works?
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> http://www.clamav.net/support/ml
>

file does type detection, not type validation.

As for possible that it works? Yes, it's possible.

Dave R.

-- 
---
Dave Raynor
Sourcefire Vulnerability Research Team
[email protected]
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Reply via email to