[clamav-users] Xml.Exploit.CVE_2013_3860-1 FP?

[Al Varnell]

Just a heads up that I’ve gotten two reports of Xml.Exploit.CVE_2013_3860-1 infected files being found in OS X Commercial Software. 

The first involved a couple of files internal to Mono software <http://www.mono-project.com>.  I suggested the user contact Mono, but since I got a second report decided to upload them to you myself:

autoidx.xsl = 9b6b0ee23ee50b72a80c9bebe32b0320
autoidx.xsl = 757b85185542373bab50439ff31844d1

The second was received late today and implicated the latest Apple Server.app 4.1.  I need to wait until tomorrow to find out exactly what file is involved in that one and attempt to have the user upload it.


-Al-
-- 
Al Varnell
Mountain View, CA




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3569 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20150421/d438f20b/attachment.bin>