Clam Anti-virus

Clamav

60 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-5314

Exploit
  • EPSS 26.69%
  • Published 03.12.2008 17:30:00
  • Last modified 09.04.2025 00:30:58

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_ph...

9.3

CVE-2008-5050

Exploit
  • EPSS 20.7%
  • Published 13.11.2008 02:30:01
  • Last modified 09.04.2025 00:30:58

Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, whic...

5

CVE-2008-1389

  • EPSS 8.61%
  • Published 04.09.2008 16:41:00
  • Last modified 09.04.2025 00:30:58

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

5

CVE-2008-3215

Exploit
  • EPSS 3.64%
  • Published 18.07.2008 16:41:00
  • Last modified 09.04.2025 00:30:58

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

5

CVE-2008-2713

Exploit
  • EPSS 3.21%
  • Published 16.06.2008 21:41:00
  • Last modified 09.04.2025 00:30:58

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.

5

CVE-2008-1837

  • EPSS 9.3%
  • Published 16.04.2008 16:05:00
  • Last modified 09.04.2025 00:30:58

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.

4.3

CVE-2008-1836

  • EPSS 5.43%
  • Published 16.04.2008 16:05:00
  • Last modified 09.04.2025 00:30:58

The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.

5

CVE-2008-1835

  • EPSS 1.81%
  • Published 16.04.2008 16:05:00
  • Last modified 09.04.2025 00:30:58

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

4.3

CVE-2008-1387

Exploit
  • EPSS 6.51%
  • Published 16.04.2008 16:05:00
  • Last modified 09.04.2025 00:30:58

ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

7.5

CVE-2008-1833

Exploit
  • EPSS 8.87%
  • Published 16.04.2008 15:05:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.