[Clamav-devel] Possible bypass via gz?
molney at sourcefire.com
Mon Feb 17 09:12:00 EST 2014
Thanks, Bradon. We'll review this.
On Sun, Feb 16, 2014 at 7:29 PM, Brandon Perry <bperry.volatile at gmail.com>wrote:
> Not sure if this person is using an old version of ClamAV and I haven't
> attempted this, but he alleges he has found a way to bypass gzip'ed
> tarballs by modifying a specific byte within the headers.
> Hope this is the correct place to report this.
> Please submit your patches to our Bugzilla: http://bugs.clamav.net
More information about the clamav-devel