USN-1482-1: ClamAV vulnerabilities

Packages

clamav - Anti-virus utility for Unix

Details

It was discovered that ClamAV incorrectly handled certain malformed TAR
archives. A remote attacker could create a specially-crafted TAR file
containing malware that could escape being detected. (CVE-2012-1457,
CVE-2012-1459)

It was discovered that ClamAV incorrectly handled certain malformed CHM
files. A remote attacker could create a specially-crafted CHM file
containing malware that could escape being detected. (CVE-2012-1458)

It was discovered that ClamAV incorrectly handled certain malformed TAR
archives. A remote attacker could create a specially-crafted TAR file
containing malware that could escape being detected. (CVE-2012-1457,
CVE-2012-1459)

It was discovered that ClamAV incorrectly handled certain malformed CHM
files. A remote attacker could create a specially-crafted CHM file
containing malware that could escape being detected. (CVE-2012-1458)

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
12.04 precise	libclamav6 – 0.97.5+dfsg-1ubuntu0.12.04.1
	clamav – 0.97.5+dfsg-1ubuntu0.12.04.1
	clamav-daemon – 0.97.5+dfsg-1ubuntu0.12.04.1
11.10 oneiric	libclamav6 – 0.97.5+dfsg-1ubuntu0.11.10.1
	clamav – 0.97.5+dfsg-1ubuntu0.11.10.1
	clamav-daemon – 0.97.5+dfsg-1ubuntu0.11.10.1
11.04 natty	libclamav6 – 0.97.5+dfsg-1ubuntu0.11.04.1
	clamav – 0.97.5+dfsg-1ubuntu0.11.04.1
	clamav-daemon – 0.97.5+dfsg-1ubuntu0.11.04.1
10.04 lucid	libclamav6 – 0.96.5+dfsg-1ubuntu1.10.04.4
	clamav – 0.96.5+dfsg-1ubuntu1.10.04.4
	clamav-daemon – 0.96.5+dfsg-1ubuntu1.10.04.4

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References