On Mon, 18 Oct 2004, Steve Basford wrote: > Just came across this: > http://www.securiteam.com/securitynews/6E00G2ABFY.html > > Bit hard to say if this would impact ClamAV?
Does clam skip the decompression if the local/global header contain a zero filesize? It sounds like from the article that those of use who use amavis and other progies which actually unzip the files are ok at least on the email side of things becasue "[i]t is possible to modify the uncompressed size of archived files in both the local and global header without affecting functionality." Does anyone have a good way to test this? -- Eric Wheeler Vice President National Security Concepts, Inc. PO Box 3567 Tualatin, OR 97062 http://www.nsci.us/ Voice: (503) 293-7656 Fax: (503) 885-0770 _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
