USN-1076-1: ClamAV vulnerability | Ubuntu security notices

Packages

clamav -

Details

It was discovered that the Microsoft Office processing code in libclamav
improperly handled certain Visual Basic for Applications (VBA) data. This
could allow a remote attacker to craft a document that could crash clamav
or possibly execute arbitrary code.

In the default installation, attackers would be isolated by the
ClamAV AppArmor profile.

It was discovered that the Microsoft Office processing code in libclamav
improperly handled certain Visual Basic for Applications (VBA) data. This
could allow a remote attacker to craft a document that could crash clamav
or possibly execute arbitrary code.

In the default installation, attackers would be isolated by the
ClamAV AppArmor profile.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
9.10 karmic	libclamav6 – 0.95.3+dfsg-1ubuntu0.09.10.4
10.10 maverick	libclamav6 – 0.96.5+dfsg-1ubuntu1.10.10.2
10.04 lucid	libclamav6 – 0.96.5+dfsg-1ubuntu1.10.04.2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2011-1003

CVE-2011-1003