Secunia Advisories

July 25, 2005

Below are the Secunia Security Advisories rated as Highly Critical (or higher) from July 25, 2005.

• Secunia Advisory 16180
  Clam AntiVirus Multiple Vulnerabilities
  • Criticality: High
  • Description: Neel Mehta and Alex Wheeler have reported some vulnerabilities in Clam AntiVirus, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
    1. Two integer overflow errors in "libclamav/tnef.c" when processing TNEF files can be exploited to cause a heap-based buffer overflow via a specially crafted TNEF file with a length value of -1 in the header.
    2. An integer overflow error in "libclamav/chmunpack.c" can be exploited to cause a heap-based buffer overflow via a specially crafted CHM file with a chunk entry that has a filename length of -1.
    3. A boundary error in "libclamav/fsg.c" when processing a FSG compressed file can cause a heap-based buffer overflow.
  • Secunia Advisory: http://secunia.com/advisories/16180/

• Secunia Advisory 16194
  Fedora update for kdenetwork
  • Criticality: High
  • Description: Fedora has issued an update for kdenetwork. This fixes some vulnerabilities, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
  • Secunia Advisory: http://secunia.com/advisories/16194/

• Secunia Advisory 16196
  Slackware update for kdenetwork
  • Criticality: High
  • Description: Slackware has issued an update for kdenetwork. This fixes some vulnerabilities, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
  • Secunia Advisory: http://secunia.com/advisories/16196/

• Secunia Advisory 16197
  Slackware update for mozilla
  • Criticality: High
  • Description: Slackware has issued an update for mozilla. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and spoofing attacks, and compromise a user's system.
  • Secunia Advisory: http://secunia.com/advisories/16197/