USN-1179-1: ClamAV vulnerability
28 July 2011
An attacker could send crafted input to ClamAV and cause it to crash.
Releases
Packages
- clamav - anti-virus utility for Unix - command-line interface
Details
It was discovered that the hash processing code in libclamav improperly
handled messages with certain hashes. This could allow a remote attacker to
craft a document that could cause clamav to crash, resulting in a denial of
service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 11.04
In general, a standard system update will make all the necessary changes.