Login Request a demo
Unscored severity · published Apr 16, 2008
CVE-2008-1837
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS…
–
CVSS
4.8%
EPSS
No
On KEV
Description
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Clamav · Clam Anti-virus
through 0.92.1; 0.15; 0.20; 0.21; 0.22; 0.23; +34 more · source: NVD
Affected product
CL
Clamav
Clam Anti-virus
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1837
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1837
lists.apple.com
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
secunia.com
http://secunia.com/advisories/29891
secunia.com
http://secunia.com/advisories/30328
secunia.com
http://secunia.com/advisories/31576
secunia.com
http://secunia.com/advisories/31882
More from Clamav
–
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related…
–
CVE-2008-5050
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash)…
–
CVE-2008-1389
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an…
–
CVE-2008-3215
libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access
–
CVE-2008-2713
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read