CVE-2012-3501

Published: Aug 25, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A.

Affected (15)

Products: Darold: Squidclamav

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Darold Squidclamav	Version 5.0
Darold Squidclamav	Version 5.1
Darold Squidclamav	Version 5.2
Darold Squidclamav	Version 5.3
Darold Squidclamav	Version 5.4
Darold Squidclamav	Version 5.5
Darold Squidclamav	Version 5.6
Darold Squidclamav	Version 5.7
Darold Squidclamav	Version 6.0
Darold Squidclamav	Version 6.1
Darold Squidclamav	Version 6.2
Darold Squidclamav	Version 6.3
Darold Squidclamav	Version 6.4
Darold Squidclamav	Version 6.5
Darold Squidclamav	Version 6.6

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (18)

http://freecode.com/projects/squidclamav/releases/346722

Source: secalert@redhat.com

http://secunia.com/advisories/49057

Source: secalert@redhat.com

Vendor Advisory

http://squidclamav.darold.net/news.html

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/08/16/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/16/4

Source: secalert@redhat.com

http://www.osvdb.org/84138

Source: secalert@redhat.com

http://www.securityfocus.com/bid/54663

Source: secalert@redhat.com

https://bugs.gentoo.org/show_bug.cgi?id=428778

Source: secalert@redhat.com

https://github.com/darold/squidclamav/commit/80f74451f628264d1d9a1f1c0bbcebc932ba5e00

Source: secalert@redhat.com

ExploitPatch

http://freecode.com/projects/squidclamav/releases/346722

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49057

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://squidclamav.darold.net/news.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/08/16/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/08/16/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/84138

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/54663

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.gentoo.org/show_bug.cgi?id=428778

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/darold/squidclamav/commit/80f74451f628264d1d9a1f1c0bbcebc932ba5e00

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

Timeline

No history available yet.