Hi Just a note to say I tried some of the zip and bzip bombs described in http://www.aerasec.de/security/advisories/decompression-bomb-vulnerability.html and found that clamav copes very well with them. In particular I was able to scan a mail consisting of a 10Gbyte bzip2 bomb followed by a copy of the SCO virus and the virus was correctly detected. Also, standalone copies of the decompression bombs could be scanned: Clamav stopped scanning after a few Mbytes.
So that's nice. -- Erik Corry I'd be a Libertarian, if they weren't all a [EMAIL PROTECTED] bunch of tax-dodging professional whiners. - B. Breathed. ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
