Re: [qmailtoaster] (another) Vulnerability in clamav

2008-11-17 Thread Erik A. Espinoza
New clamav is released on the main page. Erik On Sun, Nov 16, 2008 at 11:58 PM, David Sánchez Martín [EMAIL PROTECTED] wrote: Hi list, For our own common interest: http://www.securityfocus.com/bid/32207/discuss ClamAV is prone to an off-by-one heap-based buffer-overflow vulnerability

Re: [qmailtoaster] (another) Vulnerability in clamav

2008-11-17 Thread Alberto Guzzetti
Thanks Erik, you always provide a great support! Kindly Regards, Alberto. Erik A. Espinoza ha scritto: New clamav is released on the main page. Erik On Sun, Nov 16, 2008 at 11:58 PM, David Sánchez Martín [EMAIL PROTECTED] wrote: Hi list, For our own common interest:

RE: [qmailtoaster] (another) Vulnerability in clamav

2008-11-17 Thread David Sánchez Martín
@qmailtoaster.com Asunto: Re: [qmailtoaster] (another) Vulnerability in clamav Thanks Erik, you always provide a great support! Kindly Regards, Alberto. Erik A. Espinoza ha scritto: New clamav is released on the main page. Erik On Sun, Nov 16, 2008 at 11:58 PM, David Sánchez Martín [EMAIL PROTECTED

[qmailtoaster] (another) Vulnerability in clamav

2008-11-16 Thread David Sánchez Martín
Hi list, For our own common interest: http://www.securityfocus.com/bid/32207/discuss ClamAV is prone to an off-by-one heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this