4.3
CVSSv2

CVE-2011-3627

Published: 17/11/2011 Updated: 13/02/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The bytecode engine in ClamAV prior to 0.97.3 allows remote malicious users to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

clamav clamav 0.95.2

clamav clamav 0.92

clamav clamav 0.95

clamav clamav 0.90

clamav clamav 0.97

clamav clamav 0.93.1

clamav clamav 0.95.1

clamav clamav

clamav clamav 0.93

clamav clamav 0.96.4

clamav clamav 0.9

clamav clamav 0.93.3

clamav clamav 0.91

clamav clamav 0.94

clamav clamav 0.91.2

clamav clamav 0.96.3

clamav clamav 0.90.3

clamav clamav 0.96.2

clamav clamav 0.94.2

clamav clamav 0.96.1

clamav clamav 0.96

clamav clamav 0.96.5

clamav clamav 0.97.1

clamav clamav 0.90.1

clamav clamav 0.91.1

clamav clamav 0.95.3

clamav clamav 0.92.1

clamav clamav 0.90.2

clamav clamav 0.93.2

clamav clamav 0.94.1

Vendor Advisories

ClamAV could be made to crash or run programs as your login if it opened a specially crafted file ...