CL
Product
Clamav
60
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Clamav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-5314 | – | Dec 3 | Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related… Affected: through 0.94.1; 0.70; 0.71; 0.72; 0.73; 0.74; +34 more |
| CVE-2008-5050 | – | Nov 13 | Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash)… Affected: through 0.94; 0.01; 0.02; 0.03; 0.04; 0.05; +34 more |
| CVE-2008-1389 | – | Sep 4 | libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an… Affected: through 0.93.3; 0.11; 0.12; 0.13; 0.14; 0.14; +34 more |
| CVE-2008-3215 | – | Jul 18 | libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access Affected: 0.88.2; 0.88.4; 0.88.5; 0.88.6; 0.88.7; 0.88.7; +13 more |
| CVE-2008-2713 | – | Jun 16 | libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read Affected: 0.15; 0.20; 0.21; 0.22; 0.23; 0.24; +34 more |
| CVE-2008-1835 | – | Apr 16 | ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by… Affected: through 0.92.1; 0.15; 0.20; 0.21; 0.22; 0.23; +34 more |
| CVE-2008-1837 | – | Apr 16 | libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS… Affected: through 0.92.1; 0.15; 0.20; 0.21; 0.22; 0.23; +34 more |
| CVE-2008-1836 | – | Apr 16 | The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that… Affected: 0.90; 0.90.1; 0.90_rc1.1; 0.90_rc2; 0.90_rc3; 0.90rc1; +2 more |
| CVE-2008-1387 | – | Apr 16 | ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive… Affected: 0.90; 0.90.1; 0.90_rc1.1; 0.90_rc2; 0.90_rc3; 0.90rc1; +2 more |
| CVE-2008-1833 | – | Apr 16 | Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary Affected: 0.92.1 |
| CVE-2008-0314 | – | Apr 16 | Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length… Affected: 0.92.1 |
| CVE-2008-1100 | – | Apr 14 | Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file Affected: 0.92; 0.92.1 |
| CVE-2008-0318 | – | Feb 12 | Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute… Affected: through 0.92 |
| CVE-2007-6595 | – | Dec 31 | ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii… Affected: 0.92 |
| CVE-2007-6596 | – | Dec 31 | ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file Affected: 0.92 |
| CVE-2007-6337 | – | Dec 31 | Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors Affected: 0.91.2 |
| CVE-2007-6336 | – | Dec 20 | Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file Affected: through 0.91 |
| CVE-2007-6335 | – | Dec 20 | Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow Affected: through 0.92 |
| CVE-2007-6029 | – | Nov 20 | Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message Affected: 0.91.1; 0.91.2 |
| CVE-2007-4560 | – | Aug 28 | clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen… Affected: through 0.91.1 |
| CVE-2007-4510 | – | Aug 23 | ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted… Affected: through 0.91.2 |
| CVE-2007-3725 | – | Jul 12 | The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a… Affected: 0.15; 0.20; 0.21; 0.22; 0.23; 0.24; +34 more |
| CVE-2007-3025 | – | Jun 7 | Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service… Affected: 0.90; 0.90.1; 0.90.2; 0.90_rc1.1; 0.90_rc2; 0.90_rc3 |
| CVE-2007-3024 | – | Jun 7 | libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cli_gentempstream function in… Affected: 0.90; 0.90.1; 0.90.2; 0.90_rc1.1; 0.90_rc2; 0.90_rc3 |
| CVE-2007-3023 | – | Jun 7 | unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors Affected: 0.90; 0.90.1; 0.90.2; 0.90_rc1.1; 0.90_rc2 |
| CVE-2007-3123 | – | Jun 7 | unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified… Affected: 0.90; 0.90.1; 0.90.2; 0.90_rc1.1; 0.90_rc2; 0.90_rc3 |
| CVE-2007-3122 | – | Jun 7 | The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed… Affected: 0.90; 0.90.1; 0.90.2; 0.90_rc1.1; 0.90_rc2; 0.90_rc3 |
| CVE-2007-2029 | – | Apr 30 | File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file Affected: 0.84_rc2 |
| CVE-2007-1745 | – | Apr 16 | The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving… Affected: through 0.90.1 |
| CVE-2007-1997 | – | Apr 16 | Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remote attackers to execute… Affected: 0.90; 0.90.1; 0.90.2; 0.90_rc1.1; 0.90_rc2; 0.90_rc3 |
| CVE-2007-0898 | – | Feb 16 | Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a Affected: through 0.88.6; 0.15; 0.20; 0.21; 0.22; 0.23; +34 more |
| CVE-2006-6481 | – | Dec 12 | Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application crash) by wrapping many layers of multipart/mixed content… Affected: 0.88.6 |
| CVE-2006-6406 | – | Dec 10 | Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as… Affected: 0.88.6 |
| CVE-2006-5874 | – | Dec 10 | Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer… Affected: through 0.88; .; 0.80; 0.80_rc1; 0.80_rc2; 0.80_rc3; +16 more |
| CVE-2006-4182 | – | Oct 16 | Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary… Affected: through 0.88.4; .; 0.15; 0.20; 0.21; 0.22; +34 more |
| CVE-2006-5295 | – | Oct 16 | Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that… Affected: through 0.88.4; .; 0.15; 0.20; 0.21; 0.22; +34 more |
| CVE-2006-2427 | – | May 17 | freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local… Affected: 0.88 |
| CVE-2006-1989 | – | May 1 | Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP… Affected: 0.88; 0.88.1 |
| CVE-2006-1630 | – | Apr 6 | The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that… Affected: 0.51; 0.52; 0.53; 0.54; 0.60; 0.65; +24 more |
| CVE-2006-1614 | – | Apr 6 | Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote… Affected: 0.51; 0.52; 0.53; 0.54; 0.60; 0.65; +24 more |
| CVE-2006-0162 | – | Jan 10 | Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary… Affected: .; 0.51; 0.52; 0.53; 0.54; 0.60; +24 more |
| CVE-2005-3587 | – | Nov 16 | Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors Affected: 0.15; 0.20; 0.21; 0.22; 0.23; 0.24; +27 more |
| CVE-2005-3500 | – | Nov 5 | The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a… Affected: 0.15; 0.20; 0.21; 0.22; 0.23; 0.24; +27 more |
| CVE-2005-3303 | – | Nov 5 | The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file Affected: 0.80; 0.81; 0.82; 0.83; 0.84; 0.85; +5 more |
| CVE-2005-3239 | – | Oct 14 | The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property… Affected: . |
| CVE-2005-2919 | – | Sep 20 | libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable Affected: 0.70; 0.71; 0.72; 0.73; 0.74; 0.75; +11 more |
| CVE-2005-2920 | – | Sep 20 | Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable Affected: 0.70; 0.71; 0.72; 0.73; 0.74; 0.75; +11 more |
| CVE-2005-2450 | – | Aug 3 | Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain… Affected: 0.85; 0.85.1; 0.86 |
| CVE-2005-1923 | – | Jul 5 | The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by… Affected: 0.83; 0.84_rc1; 0.84_rc2; 0.85; 0.85.1 |
| CVE-2005-1922 | – | Jul 5 | The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file… Affected: 0.81; 0.82; 0.83; 0.84_rc1; 0.84_rc2; 0.85; +1 more |