CVE

Id
31506  
CVE No.
CVE-2008-1389  
Status
Candidate  
Description
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."  
Phase
Assigned (20080318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
338051 31506 CVE-2008-1389 MISC:http://int21.de/cve/CVE-2008-1389-clamav-chd.html  View
338052 31506 CVE-2008-1389 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661  View
338053 31506 CVE-2008-1389 CONFIRM:http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog  View
338054 31506 CVE-2008-1389 CONFIRM:https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089  View
338055 31506 CVE-2008-1389 CONFIRM:http://kolab.org/security/kolab-vendor-notice-22.txt  View
338056 31506 CVE-2008-1389 CONFIRM:http://support.apple.com/kb/HT3216  View
338057 31506 CVE-2008-1389 APPLE:APPLE-SA-2008-10-09  View
338058 31506 CVE-2008-1389 URL:http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html  View
338059 31506 CVE-2008-1389 FEDORA:FEDORA-2008-9644  View
338060 31506 CVE-2008-1389 URL:https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html  View
338061 31506 CVE-2008-1389 FEDORA:FEDORA-2008-9651  View
338062 31506 CVE-2008-1389 URL:https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html  View
338063 31506 CVE-2008-1389 GENTOO:GLSA-200809-18  View
338064 31506 CVE-2008-1389 URL:http://security.gentoo.org/glsa/glsa-200809-18.xml  View
338065 31506 CVE-2008-1389 MANDRIVA:MDVSA-2008:189  View
338066 31506 CVE-2008-1389 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:189  View
338067 31506 CVE-2008-1389 SUSE:SUSE-SR:2008:018  View
338068 31506 CVE-2008-1389 URL:http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html  View
338069 31506 CVE-2008-1389 BID:30994  View
338070 31506 CVE-2008-1389 URL:http://www.securityfocus.com/bid/30994  View
338071 31506 CVE-2008-1389 BID:31681  View
338072 31506 CVE-2008-1389 URL:http://www.securityfocus.com/bid/31681  View
338073 31506 CVE-2008-1389 VUPEN:ADV-2008-2484  View
338074 31506 CVE-2008-1389 URL:http://www.vupen.com/english/advisories/2008/2484  View
338075 31506 CVE-2008-1389 VUPEN:ADV-2008-2564  View
338076 31506 CVE-2008-1389 URL:http://www.vupen.com/english/advisories/2008/2564  View
338077 31506 CVE-2008-1389 VUPEN:ADV-2008-2780  View
338078 31506 CVE-2008-1389 URL:http://www.vupen.com/english/advisories/2008/2780  View
338079 31506 CVE-2008-1389 SECTRACK:1020805  View
338080 31506 CVE-2008-1389 URL:http://www.securitytracker.com/id?1020805  View
338081 31506 CVE-2008-1389 SECUNIA:31725  View
338082 31506 CVE-2008-1389 URL:http://secunia.com/advisories/31725  View
338083 31506 CVE-2008-1389 SECUNIA:32030  View
338084 31506 CVE-2008-1389 URL:http://secunia.com/advisories/32030  View
338085 31506 CVE-2008-1389 SECUNIA:31906  View
338086 31506 CVE-2008-1389 URL:http://secunia.com/advisories/31906  View
338087 31506 CVE-2008-1389 SECUNIA:32222  View
338088 31506 CVE-2008-1389 URL:http://secunia.com/advisories/32222  View
338089 31506 CVE-2008-1389 SECUNIA:32699  View
338090 31506 CVE-2008-1389 URL:http://secunia.com/advisories/32699  View
338091 31506 CVE-2008-1389 SECUNIA:31982  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50283 JVNDB-2008-005593 Plone CMS における管理権限を取得される脆弱性 Plone CMS は、管理者アカウントの _ac クッキー内に base64 エンコードされた形式のユーザ名およびパスワードを配置するため、管理権限を取得される脆弱性が存在します。 CVE-2008-1393 31506 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005593.html  View