CVE-2007-0897
- EPSS 3.39%
- Veröffentlicht 16.02.2007 19:28:00
- Zuletzt bearbeitet 16.06.2026 22:36:30
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record l...
CVE-2006-4018
- EPSS 19.06%
- Veröffentlicht 08.08.2006 20:04:00
- Zuletzt bearbeitet 16.06.2026 22:28:16
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.
- EPSS 11.35%
- Veröffentlicht 06.04.2006 22:04:00
- Zuletzt bearbeitet 16.06.2026 22:23:18
Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidenc...
CVE-2005-3501
- EPSS 3.59%
- Veröffentlicht 05.11.2005 11:02:00
- Zuletzt bearbeitet 16.06.2026 22:17:04
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero le...