Clam Anti-virus

Clamav

60 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-5314

Exploit
  • EPSS 8.2%
  • Veröffentlicht 03.12.2008 17:30:00
  • Zuletzt bearbeitet 16.06.2026 22:59:41

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_ph...

9.3

CVE-2008-5050

Exploit
  • EPSS 8.29%
  • Veröffentlicht 13.11.2008 02:30:01
  • Zuletzt bearbeitet 16.06.2026 22:59:09

Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, whic...

5

CVE-2008-1389

  • EPSS 3.38%
  • Veröffentlicht 04.09.2008 16:41:00
  • Zuletzt bearbeitet 16.06.2026 22:51:38

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

5

CVE-2008-3215

Exploit
  • EPSS 4.71%
  • Veröffentlicht 18.07.2008 16:41:00
  • Zuletzt bearbeitet 16.06.2026 22:55:22

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

5

CVE-2008-2713

Exploit
  • EPSS 4.71%
  • Veröffentlicht 16.06.2008 21:41:00
  • Zuletzt bearbeitet 16.06.2026 22:54:17

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.

5

CVE-2008-1837

  • EPSS 4.76%
  • Veröffentlicht 16.04.2008 16:05:00
  • Zuletzt bearbeitet 16.06.2026 22:52:36

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.

4.3

CVE-2008-1836

  • EPSS 3.55%
  • Veröffentlicht 16.04.2008 16:05:00
  • Zuletzt bearbeitet 16.06.2026 22:52:36

The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.

5

CVE-2008-1835

  • EPSS 4.03%
  • Veröffentlicht 16.04.2008 16:05:00
  • Zuletzt bearbeitet 16.06.2026 22:52:35

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

4.3

CVE-2008-1387

Exploit
  • EPSS 4.35%
  • Veröffentlicht 16.04.2008 16:05:00
  • Zuletzt bearbeitet 16.06.2026 22:51:38

ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

7.5

CVE-2008-1833

Exploit
  • EPSS 8.6%
  • Veröffentlicht 16.04.2008 15:05:00
  • Zuletzt bearbeitet 16.06.2026 22:52:35

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.