Published: 08/04/2009 Updated: 17/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

libclamav/pe.c in ClamAV prior to 0.95 allows remote malicious users to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error.

Vulnerable Product	Search on Vulmon	Subscribe to Product
clamav clamav
clamav clamav 0.94.1
clamav clamav 0.94
clamav clamav 0.93.1

Debian Bug report logs - #523016 clamav vulnerability Package: clamav; Maintainer for clamav is ClamAV Team <pkg-clamav-devel@listsaliothdebianorg>; Source for clamav is src:clamav (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Tue, 7 Apr 2009 21:57:02 UTC Severity: g ...

It was discovered that ClamAV did not properly verify its input when processing TAR archives A remote attacker could send a specially crafted TAR file and cause a denial of service via infinite loop (CVE-2009-1270) ...

Several vulnerabilities have been discovered in the ClamAV anti-virus toolkit: CVE-2008-6680 Attackers can cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error CVE-2009-1270 Attackers can cause a denial of service (infinite loop) via a crafted tar file that causes (1) clamd and (2) clamscan ...

CWE-189 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335 http://www.openwall.com/lists/oss-security/2009/04/07/6 http://www.ubuntu.com/usn/usn-754-1 http://www.vupen.com/english/advisories/2009/0934 http://secunia.com/advisories/34716 http://www.debian.org/security/2009/dsa-1771 http://www.mandriva.com/security/advisories?name=MDVSA-2009:097 http://www.securityfocus.com/bid/34357 http://support.apple.com/kb/HT3865 http://secunia.com/advisories/36701 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html https://exchange.xforce.ibmcloud.com/vulnerabilities/49845 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523016 https://usn.ubuntu.com/754-1/https://nvd.nist.gov

CVE-2008-6680

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect