clam anti-virus clamav 0.70 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

7.5

CVSSv2

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) prior to 0.88 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.

5.1

CVSSv2

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) prior to 0.88.1, when ArchiveMaxFileSize is disabled, allows remote malicious users to cause a denial of service and possibly execute arbitrary code.

5

CVSSv2

The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) prior to 0.88.1 allows remote malicious users to cause a denial of service via unspecified vectors that trigger an "invalid memory access."

4.3

CVSSv2

Stack consumption vulnerability in libclamav/special.c in ClamAV prior to 0.94.2 allows remote malicious users to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions...

1 EDB exploit

7.5

CVSSv2

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions prior to 0.88.5, allows remote malicious users to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow ...

1 EDB exploit

6.4

CVSSv2

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV prior to 0.90 allows remote malicious users to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook