CVE-2005-2450 Information

Description

Multiple integer overflows in the (1) TNEF (2) CHM or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

Reference

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987 http://marc.info/?l=bugtraq&m=112230864412932&w=2 http://secunia.com/advisories/16180 http://secunia.com/advisories/16229 http://secunia.com/advisories/16250 http://secunia.com/advisories/16296 http://secunia.com/advisories/16458 http://security.gentoo.org/glsa/glsa-200507-25.xml http://sourceforge.net/project/shownotes.php?release_id=344514 http://www.novell.com/linux/security/advisories/2005_18_sr.html http://www.osvdb.org/18257 http://www.osvdb.org/18258 http://www.osvdb.org/18259 http://www.securityfocus.com/bid/14359 https://exchange.xforce.ibmcloud.com/vulnerabilities/21555