Issue with FP only on 0.103.1

Mark Allan <[email protected]> Mon, 8 Feb 2021 11:03:39 +0000
Newsgroups gmane.comp.security.virus.clamav.devel
Message-ID <[email protected]>
Hi all,

It looks like the additional image file type support in 0.103.1 has introduced an issue with a particular signature which has been in the database since 2018

	Img.Exploit.CVE_2018_4904-6449838-0

It's flagging up thousands of known-good files. As far as I can tell, they're all TIFF files.

I've added that signature to an ign2 file for now, but I'm wondering if there's something else that's maybe amiss somewhere either with the signature or the 0.103.1 update?

Best regards,
Mark

_______________________________________________

clamav-devel mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-devel

Please submit your patches to our Github: https://github.com/Cisco-Talos/clamav-devel/pulls

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml