Description
The qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted CAB archive that uses the Quantum (aka .Q) compression format. NOTE: some of these details are obtained from third party information.
References (16)
Core 16
Core References
Various Sources x_refsource_confirm
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1771
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1206
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39656
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2010:082
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-926-1
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0827
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT4312
Various Sources x_refsource_confirm
http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0909
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39293
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0832
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39329
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/39262
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1001
Scores
EPSS
0.0335
EPSS Percentile
87.3%
Details
CWE
CWE-20
Status
published
Products (42)
clamav/clamav
0.01
clamav/clamav
0.02
clamav/clamav
0.3
clamav/clamav
0.03
clamav/clamav
0.05
clamav/clamav
0.9 rc1
clamav/clamav
0.10
clamav/clamav
0.12
clamav/clamav
0.13
clamav/clamav
0.14 (2 CPE variants)
... and 32 more
Published
Apr 08, 2010
Tracked Since
Feb 18, 2026