Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

clam anti-virus clamav 0.85 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-1923
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote malicious users to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes ...
Clam Anti-virus Clamav 0.83Clam Anti-virus Clamav 0.84 Rc2Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.84 Rc1Clam Anti-virus Clamav 0.85
NA
CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus (ClamAV) prior to 0.86.1 allows remote malicious users to cause a denial of service (application crash) via a crafted Quantum archive.
Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.86Clam Anti-virus Clamav 0.85
NA
CVE-2005-2450
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and previous versions allow remote malicious users to gain privileges via a crafted e-mail message.
Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.86Clam Anti-virus Clamav 0.85
NA
CVE-2005-1922
The MS-Expand file handling in Clam AntiVirus (ClamAV) prior to 0.86 allows remote malicious users to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
Clam Anti-virus Clamav 0.85Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.81Clam Anti-virus Clamav 0.82Clam Anti-virus Clamav 0.84 Rc1Clam Anti-virus Clamav 0.83Clam Anti-virus Clamav 0.84 Rc2
NA
CVE-2005-3303
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 up to and including 0.87 allows remote malicious users to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
Clam Anti-virus Clamav 0.80Clam Anti-virus Clamav 0.81Clam Anti-virus Clamav 0.86.1Clam Anti-virus Clamav 0.86.2Clam Anti-virus Clamav 0.82Clam Anti-virus Clamav 0.83Clam Anti-virus Clamav 0.87Clam Anti-virus Clamav 0.84Clam Anti-virus Clamav 0.85Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.86
NA
CVE-2005-2919
libclamav/fsg.c in Clam AntiVirus (ClamAV) prior to 0.87 allows remote malicious users to cause a denial of service (infinite loop) via a crafted FSG packed executable.
Clam Anti-virus Clamav 0.75Clam Anti-virus Clamav 0.75.1Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.86Clam Anti-virus Clamav 0.73Clam Anti-virus Clamav 0.74Clam Anti-virus Clamav 0.84Clam Anti-virus Clamav 0.85Clam Anti-virus Clamav 0.70Clam Anti-virus Clamav 0.71Clam Anti-virus Clamav 0.72Clam Anti-virus Clamav 0.82Clam Anti-virus Clamav 0.83Clam Anti-virus Clamav 0.80Clam Anti-virus Clamav 0.81Clam Anti-virus Clamav 0.86.1Clam Anti-virus Clamav 0.86.2
NA
CVE-2005-2920
Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) prior to 0.87 allows remote malicious users to execute arbitrary code via a crafted UPX packed executable.
Clam Anti-virus Clamav 0.71Clam Anti-virus Clamav 0.72Clam Anti-virus Clamav 0.82Clam Anti-virus Clamav 0.83Clam Anti-virus Clamav 0.84Clam Anti-virus Clamav 0.75Clam Anti-virus Clamav 0.75.1Clam Anti-virus Clamav 0.86Clam Anti-virus Clamav 0.86.1Clam Anti-virus Clamav 0.73Clam Anti-virus Clamav 0.74Clam Anti-virus Clamav 0.85Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.70Clam Anti-virus Clamav 0.80Clam Anti-virus Clamav 0.81Clam Anti-virus Clamav 0.86.2
NA
CVE-2006-5874
Clam AntiVirus (ClamAV) 0.88 and previous versions allows remote malicious users to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.
Clam Anti-virus Clamav .Clam Anti-virus Clamav 0.82Clam Anti-virus Clamav 0.83Clam Anti-virus Clamav 0.86.1Clam Anti-virus Clamav 0.86.2Clam Anti-virus Clamav 0.80Clam Anti-virus Clamav 0.80 Rc1Clam Anti-virus Clamav 0.80 Rc2Clam Anti-virus Clamav 0.84Clam Anti-virus Clamav 0.84 Rc1Clam Anti-virus Clamav 0.86 Rc1Clam Anti-virus Clamav 0.87Clam Anti-virus Clamav 0.80 Rc3Clam Anti-virus Clamav 0.80 Rc4Clam Anti-virus Clamav 0.84 Rc2Clam Anti-virus Clamav 0.85Clam Anti-virus Clamav 0.87.1Clam Anti-virus ClamavClam Anti-virus Clamav 0.81Clam Anti-virus Clamav 0.81 Rc1Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.86
NA
CVE-2005-3500
The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) prior to 0.87.1 allows remote malicious users to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
Clam Anti-virus Clamav 0.23Clam Anti-virus Clamav 0.24Clam Anti-virus Clamav 0.67Clam Anti-virus Clamav 0.68Clam Anti-virus Clamav 0.75.1Clam Anti-virus Clamav 0.80Clam Anti-virus Clamav 0.86Clam Anti-virus Clamav 0.86.1Clam Anti-virus Clamav 0.21Clam Anti-virus Clamav 0.22Clam Anti-virus Clamav 0.60Clam Anti-virus Clamav 0.65Clam Anti-virus Clamav 0.74Clam Anti-virus Clamav 0.75Clam Anti-virus Clamav 0.85Clam Anti-virus Clamav 0.85.1Clam Anti-virus Clamav 0.15Clam Anti-virus Clamav 0.20Clam Anti-virus Clamav 0.53Clam Anti-virus Clamav 0.54Clam Anti-virus Clamav 0.71Clam Anti-virus Clamav 0.72
NA
CVE-2005-3587
Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) prior to 0.87.1 allows malicious users to perform unknown attacks via unknown vectors.
Clam Anti-virus Clamav 0.52Clam Anti-virus Clamav 0.53Clam Anti-virus Clamav 0.54Clam Anti-virus Clamav 0.60Clam Anti-virus Clamav 0.82Clam Anti-virus Clamav 0.83Clam Anti-virus Clamav 0.84Clam Anti-virus Clamav 0.85Clam Anti-virus Clamav 0.23Clam Anti-virus Clamav 0.51Clam Anti-virus Clamav 0.65Clam Anti-virus Clamav 0.68Clam Anti-virus Clamav 0.70Clam Anti-virus Clamav 0.75Clam Anti-virus Clamav 0.80Clam Anti-virus Clamav 0.86Clam Anti-virus Clamav 0.86.2Clam Anti-virus Clamav 0.15Clam Anti-virus Clamav 0.20Clam Anti-virus Clamav 0.21Clam Anti-virus Clamav 0.71Clam Anti-virus Clamav 0.72
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook