clam anti-virus clamav 0.88.4 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Unspecified vulnerability in ClamAV prior to 0.88.5 allows remote malicious users to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."

1 EDB exploit

5

CVSSv2

libclamav/petite.c in ClamAV prior to 0.93.3 allows remote malicious users to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Clam Anti-virus Clamav 0.88.2 Clam Anti-virus Clamav 0.88.4 Clam Anti-virus Clamav 0.90.1 Clam Anti-virus Clamav 0.92 Clam Anti-virus Clamav 0.93 Clam Anti-virus Clamav 0.88.7 Clam Anti-virus Clamav 0.90 Clam Anti-virus Clamav 0.91.2 Clam Anti-virus Clamav 0.92.1 Clam Anti-virus Clamav 0.90.3 Clam Anti-virus Clamav 0.88.5 Clam Anti-virus Clamav 0.88.6 Clam Anti-virus Clamav 0.90.2

7.5

CVSSv2

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions prior to 0.88.5, allows remote malicious users to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow ...

1 EDB exploit

4.3

CVSSv2

Stack consumption vulnerability in libclamav/special.c in ClamAV prior to 0.94.2 allows remote malicious users to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions...

1 EDB exploit

6.4

CVSSv2

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV prior to 0.90 allows remote malicious users to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.

4.3

CVSSv2

The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) prior to 0.91 allows user-assisted remote malicious users to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.

1 EDB exploit

5

CVSSv2

libclamunrar in ClamAV prior to 0.93 allows remote malicious users to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook