clamav: security update
New clamav packages fix an off-by-one vulnerability which
could lead to a DoS condition. CVE-2011-2721 has been
assigned to this issue.
-
Submitted by
Adrian Schröter (adrianSuSE)
- Version 4940
Fixed bugs
bnc#708263
VUL-0: New clamav packages fix minor security issues
CVE#CVE-2011-2721
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
