Cisco-Talos / clamav

ClamAV - Documentation is here: https://docs.clamav.net
https://www.clamav.net/
GNU General Public License v2.0
4.38k stars 704 forks source link

Clam av detecting wrong MIME type. #912

Open ShreyashLatkar opened 1 year ago

ShreyashLatkar commented 1 year ago

When I upload the document excel workbook 5.0/95 then clam av detects as application/msword but it is of type application/vnd.ms-excel.

avStatus={ mismatch }, expectedType={ application/vnd.ms-excel }, actualType={ application/msword },

Same issue is observed with csv comma delimeter type and csv utf 8

For csv comma delimeter:avStatus={ mismatch }, expectedType={ text/csv }, actualType={ application/x-ndjson } For csv utf 8 avStatus={ mismatch }, expectedType={ text/csv }, actualType={ text/plain; charset=utf-8 },

Due to MIME missmatch files getting quarantined.

Please suggest to fix this issue.

ThomasMolloy commented 12 months ago

@ShreyashLatkar How are you determining the MIME type? I am trying to accept / reject specific MIME types but have not found any information with regards to ClamAV specifying the MIME type