Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

clamav clamav 0.96 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2010-1640
Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote malicious users to cause a denial of service (crash) via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling.
Clamav Clamav 0.96
4.3
CVSSv2
CVE-2010-1639
The cli_pdf function in libclamav/pdf.c in ClamAV prior to 0.96.1 allows remote malicious users to cause a denial of service (crash) via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length.
Clamav Clamav 0.95.2Clamav Clamav 0.86.2Clamav Clamav 0.88.5Clamav Clamav 0.02Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.15Clamav Clamav 0.90Clamav Clamav 0.75.1Clamav Clamav 0.65Clamav Clamav 0.88.7Clamav Clamav 0.81Clamav Clamav 0.86Clamav Clamav 0.01Clamav Clamav 0.85Clamav Clamav 0.84Clamav Clamav 0.3Clamav Clamav 0.93.1Clamav Clamav 0.95.1Clamav Clamav 0.93Clamav Clamav 0.70Clamav Clamav 0.68.1
5
CVSSv2
CVE-2010-1311
The qtm_decompress function in libclamav/mspack.c in ClamAV prior to 0.96 allows remote malicious users to cause a denial of service (memory corruption and application crash) via a crafted CAB archive that uses the Quantum (aka .Q) compression format. NOTE: some of these details ...
Clamav Clamav 0.95.2Clamav Clamav 0.86.2Clamav Clamav 0.88.5Clamav Clamav 0.02Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.15Clamav Clamav 0.90Clamav Clamav 0.75.1Clamav Clamav 0.65Clamav Clamav 0.88.7Clamav Clamav 0.81Clamav Clamav 0.86Clamav Clamav 0.01Clamav Clamav 0.85Clamav Clamav 0.84Clamav Clamav 0.3Clamav Clamav 0.93.1Clamavs Clamav 0.04Clamav Clamav 0.95.1Clamav Clamav 0.93Clamav Clamav 0.70
4.3
CVSSv2
CVE-2011-3627
The bytecode engine in ClamAV prior to 0.97.3 allows remote malicious users to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
Clamav Clamav 0.95.2Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.90Clamav Clamav 0.97Clamav Clamav 0.93.1Clamav Clamav 0.95.1Clamav ClamavClamav Clamav 0.93Clamav Clamav 0.96.4Clamav Clamav 0.9Clamav Clamav 0.93.3Clamav Clamav 0.91Clamav Clamav 0.94Clamav Clamav 0.91.2Clamav Clamav 0.96.3Clamav Clamav 0.90.3Clamav Clamav 0.96.2Clamav Clamav 0.94.2Clamav Clamav 0.96.1Clamav Clamav 0.96Clamav Clamav 0.96.5
5
CVSSv2
CVE-2013-2020
Integer underflow in the cli_scanpe function in pe.c in ClamAV prior to 0.97.8 allows remote malicious users to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.10Suse Linux Enterprise Server 11.0Clamav Clamav 0.96Clamav Clamav 0.95.1Clamav Clamav 0.95Clamav Clamav 0.93.2Clamav Clamav 0.93.3Clamav Clamav 0.90.2Clamav Clamav 0.90.1 P0Clamav Clamav 0.93.1Clamav Clamav 0.94.1Clamav Clamav 0.96.1Clamav Clamav 0.96.2Clamav Clamav 0.97.2Clamav Clamav 0.95.3Clamav Clamav 0.90Clamav Clamav 0.93Clamav Clamav 0.90.1
10
CVSSv2
CVE-2010-0098
ClamAV prior to 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote malicious users to bypass virus detection via a crafted archive that is compatible with standard archive utilities.
Clamav Clamav 0.95.2Clamav Clamav 0.86.2Clamav Clamav 0.88.5Clamav Clamav 0.02Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.15Clamav Clamav 0.90Clamav Clamav 0.75.1Clamav Clamav 0.65Clamav Clamav 0.88.7Clamav Clamav 0.81Clamav Clamav 0.86Clamav Clamav 0.01Clamav Clamav 0.85Clamav Clamav 0.84Clamav Clamav 0.3Clamav Clamav 0.93.1Clamavs Clamav 0.04Clamav Clamav 0.95.1Clamav Clamav 0.93Clamav Clamav 0.70
9.3
CVSSv2
CVE-2010-3434
Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV prior to 0.96.3 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtaine...
Clamav Clamav 0.95.2Clamav Clamav 0.86.2Clamav Clamav 0.88.5Clamav Clamav 0.02Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.15Clamav Clamav 0.90Clamav Clamav 0.75.1Clamav Clamav 0.65Clamav Clamav 0.88.7Clamav Clamav 0.81Clamav Clamav 0.86Clamav Clamav 0.01Clamav Clamav 0.92 P0Clamav Clamav 0.85Clamav Clamav 0.84Clamav Clamav 0.3Clamav Clamav 0.91.2 P0Clamav Clamav 0.93.1Clamav Clamav 0.95.1Clamav Clamav 0.93
5
CVSSv2
CVE-2011-2721
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV prior to 0.97.2 allows remote malicious users to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Clamav Clamav 0.95.2Clamav Clamav 0.86.2Clamav Clamav 0.88.5Clamav Clamav 0.02Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.8Clamav Clamav 0.15Clamav Clamav 0.90Clamav Clamav 0.75.1Clamav Clamav 0.65Clamav Clamav 0.88.7Clamav Clamav 0.81Clamav Clamav 0.86Clamav Clamav 0.01Clamav Clamav 0.92 P0Clamav Clamav 0.97Clamav Clamav 0.85Clamav Clamav 0.84Clamav Clamav 0.3Clamav Clamav 0.91.2 P0Clamav Clamav 0.93.1
6.8
CVSSv2
CVE-2011-1003
Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV prior to 0.97 might allow remote malicious users to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of...
Clamav ClamavClamav Clamav 0.95.2Clamav Clamav 0.86.2Clamav Clamav 0.88.5Clamav Clamav 0.02Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.8Clamav Clamav 0.15Clamav Clamav 0.90Clamav Clamav 0.75.1Clamav Clamav 0.65Clamav Clamav 0.88.7Clamav Clamav 0.81Clamav Clamav 0.86Clamav Clamav 0.01Clamav Clamav 0.92 P0Clamav Clamav 0.85Clamav Clamav 0.84Clamav Clamav 0.3Clamav Clamav 0.91.2 P0Clamav Clamav 0.93.1
7.5
CVSSv2
CVE-2010-4479
Unspecified vulnerability in pdf.c in libclamav in ClamAV prior to 0.96.5 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-201...
Clamav Clamav 0.95.2Clamav Clamav 0.86.2Clamav Clamav 0.88.5Clamav Clamav 0.02Clamav Clamav 0.92Clamav Clamav 0.95Clamav Clamav 0.8Clamav Clamav 0.15Clamav Clamav 0.90Clamav Clamav 0.75.1Clamav Clamav 0.65Clamav Clamav 0.88.7Clamav Clamav 0.81Clamav Clamav 0.86Clamav Clamav 0.01Clamav Clamav 0.92 P0Clamav Clamav 0.85Clamav Clamav 0.84Clamav Clamav 0.3Clamav Clamav 0.91.2 P0Clamav Clamav 0.93.1Clamav Clamav 0.95.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook