critical10.0
CVE-2008-3914
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) l…
Impact
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clamav | Clamav | through 0.93.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://kolab.org/security/kolab-vendor-notice-22.txt
- http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
- http://secunia.com/advisories/31906
- http://secunia.com/advisories/31982
- http://secunia.com/advisories/32030
- http://secunia.com/advisories/32222
- http://secunia.com/advisories/32424
- http://secunia.com/advisories/32699
- http://security.gentoo.org/glsa/glsa-200809-18.xml
- http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661
- http://support.apple.com/kb/HT3216
- http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
- http://www.debian.org/security/2008/dsa-1660
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:189
- http://www.openwall.com/lists/oss-security/2008/09/03/2
- http://www.openwall.com/lists/oss-security/2008/09/04/13
- http://www.securityfocus.com/bid/31051
- http://www.securityfocus.com/bid/31681
- http://www.securitytracker.com/id?1020828
- http://www.vupen.com/english/advisories/2008/2564
- http://www.vupen.com/english/advisories/2008/2780
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45058
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html
- https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html