NVD

Id
13159  
Name
CVE-2010-1640  
Description
Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crash) via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-05-26  
Modified Date
2010-09-09  
Seq
2010-1640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72695 13159 CVE-2010-1640 http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96.1  View
72696 13159 CVE-2010-1640 http://git.clamav.net/gitweb?p=clamav-devel.git;a=blobdiff;f=libclamav/pe_icons.c;h=3f1bc5be69d0f9d84e576814d1a3cc6f40c4ff2c;hp=39a714f05968f9e929576bf171dd0eb58bf06bef;hb=7f0e3bbf77382d9782e0189bf80f5f59a95779b3;hpb=f0eb394501ec21b9fe67f36cbf5db788711d4236  View
72697 13159 CVE-2010-1640 SUSE-SR:2010:014  View
72698 13159 CVE-2010-1640 MDVSA-2010:110  View
72699 13159 CVE-2010-1640 [oss-security] 20100521 CVE Request: off by one DoS in pe_icons.c  View
72700 13159 CVE-2010-1640 40318  View
72701 13159 CVE-2010-1640 ADV-2010-1214  View
72702 13159 CVE-2010-1640 clamav-parseicon-dos(58825)  View
72703 13159 CVE-2010-1640 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38236 JVNDB-2010-004021 ClamAV の parseicon 関数におけるサービス運用妨害 (DoS) の脆弱性 ClamAV の libclamav/pe_icons.c の parseicon 関数には、一つずれエラーが発生するため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2010-1640 44220 CVE-2010-1640 13159 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004021.html 2010-05-18 2012-06-26 View