UbuntuUSN-1076-1ClamAV vulnerability
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%
Releases
- Ubuntu 10.10
- Ubuntu 10.04
- Ubuntu 9.10
Packages
- clamav -
Details
It was discovered that the Microsoft Office processing code in libclamav
improperly handled certain Visual Basic for Applications (VBA) data. This
could allow a remote attacker to craft a document that could crash clamav
or possibly execute arbitrary code.
In the default installation, attackers would be isolated by the
ClamAV AppArmor profile.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.10 | noarch | libclamav6 | < 0.95.3+dfsg-1ubuntu0.09.10.4 | UNKNOWN |
| Ubuntu | 9.10 | noarch | clamav | < 0.95.3+dfsg-1ubuntu0.09.10.4 | UNKNOWN |
| Ubuntu | 9.10 | noarch | clamav-daemon | < 0.95.3+dfsg-1ubuntu0.09.10.4 | UNKNOWN |
| Ubuntu | 9.10 | noarch | clamav-dbg | < 0.95.3+dfsg-1ubuntu0.09.10.4 | UNKNOWN |
| Ubuntu | 9.10 | noarch | clamav-freshclam | < 0.95.3+dfsg-1ubuntu0.09.10.4 | UNKNOWN |
| Ubuntu | 9.10 | noarch | clamav-milter | < 0.95.3+dfsg-1ubuntu0.09.10.4 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libclamav-dev | < 0.95.3+dfsg-1ubuntu0.09.10.4 | UNKNOWN |
| Ubuntu | 10.10 | noarch | libclamav6 | < 0.96.5+dfsg-1ubuntu1.10.10.2 | UNKNOWN |
| Ubuntu | 10.10 | noarch | clamav | < 0.96.5+dfsg-1ubuntu1.10.10.2 | UNKNOWN |
| Ubuntu | 10.10 | noarch | clamav-daemon | < 0.96.5+dfsg-1ubuntu1.10.10.2 | UNKNOWN |
References
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%