[clamav-users] CVE-2017-11241 - Synology DIskStation AV Essentials

[Judd Grayzel]

Where do I get the MD5 for the file?

Sent from my iPhone

> On Sep 11, 2017, at 1:42 PM, Joel Esler (jesler) <jesler at cisco.com> wrote:
> 
> You want to submit some false positives to us via the website, followup here with the md5s of the files you submit, the malware team can take a look.
> 
> --
> Joel Esler | Talos: Manager | jesler at cisco.com<mailto:jesler at cisco.com>
> 
> 
> 
> 
> 
> 
> On Sep 11, 2017, at 3:06 PM, Judd Grayzel <judd_grayzel at yahoo.com<mailto:judd_grayzel at yahoo.com>> wrote:
> 
> My Synology Diskstation running the Anti-Virus Essentials (ClamAV based engine) quarantined almost 1000 files for the CVE-2017-11241 vulnerability. This CVE references a problem with Adobe Acrobat, but the files that are being quarantined are Microsoft Excel fIles.
> Do these files really have a virus of some sort, or is this a False/Positive situation?
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net<mailto:clamav-users at lists.clamav.net>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml