CVE-2010-1311

CVSS 5.0 - MEDIUM

Description

The qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted CAB archive that uses the Quantum (aka .Q) compression format. NOTE: some of these details are obtained from third party information.

Affected Products

50 of 96

Vendor	Product	Version
clamav	clamav	`All versions`
clamav	clamav	`0.01`
clamav	clamav	`0.02`
clamav	clamav	`0.3`
clamav	clamav	`0.03`
clamav	clamav	`0.05`
clamav	clamav	`0.9`
clamav	clamav	`0.10`
clamav	clamav	`0.12`
clamav	clamav	`0.13`
clamav	clamav	`0.14`
clamav	clamav	`0.14`
clamav	clamav	`0.15`
clamav	clamav	`0.20`
clamav	clamav	`0.21`
clamav	clamav	`0.22`
clamav	clamav	`0.23`
clamav	clamav	`0.24`
clamav	clamav	`0.51`
clamav	clamav	`0.52`
clamav	clamav	`0.53`
clamav	clamav	`0.54`
clamav	clamav	`0.60`
clamav	clamav	`0.60p`
clamav	clamav	`0.65`
clamav	clamav	`0.66`
clamav	clamav	`0.67`
clamav	clamav	`0.67-1`
clamav	clamav	`0.68`
clamav	clamav	`0.68.1`
clamav	clamav	`0.70`
clamav	clamav	`0.70`
clamav	clamav	`0.71`
clamav	clamav	`0.72`
clamav	clamav	`0.73`
clamav	clamav	`0.74`
clamav	clamav	`0.75`
clamav	clamav	`0.75.1`
clamav	clamav	`0.80`
clamav	clamav	`0.80`
clamav	clamav	`0.80`
clamav	clamav	`0.80`
clamav	clamav	`0.80`
clamav	clamav	`0.81`
clamav	clamav	`0.82`
clamav	clamav	`0.83`
clamav	clamav	`0.84`
clamav	clamav	`0.84`
clamav	clamav	`0.84`
clamav	clamav	`0.85`