ClamAV libclamav/fsg.c拒绝服务漏洞

https://www.securityfocus.com/bid/14867
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200509-174

ClamAntiVirus（ClamAV）是ClamAV团队开发的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。ClamAntiVirus(ClamAV)0.87之前版本的libclamav/fsg.c文件存在漏洞，远程攻击者利用它伪造FSG压缩可执行文件，从而触发拒绝服务(死循环)。

Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Clam Anti-Virus ClamAV 0.86.2 Clam Anti-Virus ClamAV 0.86 .1 Clam Anti-Virus ClamAV 0.86 Clam Anti-Virus ClamAV 0.85.1

来源:USGovernment
名称:GLSA-200509-13
链接:http://www.gentoo.org/security/en/glsa/glsa-200509-13.xml
来源:sourceforge.net
链接:http://sourceforge.net/project/shownotes.php?release_id=356974
来源:XF
名称:clam-antivirus-fsg-dos(22308)
链接:http://xforce.iss.net/xforce/xfdb/22308
来源:BID
名称:14867
链接:http://www.securityfocus.com/bid/14867
来源:OSVDB
名称:19507
链接:http://www.osvdb.org/19507
来源:SUSE
名称:SUSE-SA:2005:055
链接:http://www.novell.com/linux/security/advisories/2005_55_clamav.html
来源:MANDRAKE
名称:MDKSA-2005:166
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2005:166
来源:VUPEN
名称:ADV-2005-1774
链接:http://www.frsirt.com/english/advisories/2005/1774
来源:DEBIAN
名称:DSA-824
链接:http://www.debian.org/security/2005/dsa-824
来源:SECUNIA
名称:16989
链接:http://secunia.com/advisories/16989
来源:SECUNIA
名称:16848
链接:http://secunia.com/advisories/16848
来源:MANDRAKE
名称:MDKSA-2005:166
链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:166