Vulnerability index

Browse CVEs

48 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Clamav HIGH 9.3
CVE-2008-5050EPSS 8%

Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to caus…

Fix: after 0.94
Fix from $1,950 2008-11-13
Clamav MEDIUM 5.0
CVE-2008-1389

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malforme…

Fix: after 0.93.3
Fix from $1,600 2008-09-04
Clamav MEDIUM 5.0
CVE-2008-3215

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-b…

No fix yet
Fix from $1,600 2008-07-18
Clamav MEDIUM 5.0
CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bou…

No fix yet
Fix from $1,600 2008-06-16
Clamav MEDIUM 5.0
CVE-2008-1835

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by Cla…

Fix: after 0.92.1
Fix from $1,600 2008-04-16
Clamav MEDIUM 5.0
CVE-2008-1837

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems,"…

Fix: after 0.92.1
Fix from $1,600 2008-04-16
Clamav HIGH 7.5
CVE-2008-0314EPSS 9%

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE b…

No fix yet
Fix from $1,950 2008-04-16
Clamav HIGH 7.5
CVE-2008-1833EPSS 9%

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE…

No fix yet
Fix from $1,950 2008-04-16
Clamav HIGH 10.0
CVE-2008-1100EPSS 11%

Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code…

Mitigation only
Fix from $1,950 2008-04-14
Clamav HIGH 10.0
CVE-2008-0318EPSS 8%

Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of serv…

Fix: after 0.92
Fix from $1,950 2008-02-12
Clamav HIGH 10.0
CVE-2007-6337

Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vec…

Patch available
Fix from $1,950 2007-12-31
Clamav MEDIUM 5.0
CVE-2007-6596

ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.

Mitigation only
Fix from $1,600 2007-12-31
Clamav HIGH 7.5
CVE-2007-6335EPSS 18%

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which trigger…

Fix: after 0.92
Fix from $1,950 2007-12-20
Clamav MEDIUM 6.8
CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file.

Fix: after 0.91
Fix from $1,600 2007-12-20
Clamav HIGH 7.5
CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this info…

No fix yet
Fix from $1,950 2007-11-20
Clamav HIGH 7.6
CVE-2007-4560EPSS 84%

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters th…

Fix: after 0.91.1
Fix from $1,950 2007-08-28
Clamav MEDIUM 5.0
CVE-2007-3025

Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers…

Patch available
Fix from $1,600 2007-06-07
Clamav HIGH 10.0
CVE-2007-3023

unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack…

Patch available
Fix from $1,950 2007-06-07
Clamav MEDIUM 5.0
CVE-2007-3122

The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value…

Patch available
Fix from $1,600 2007-06-07
Clamav MEDIUM 5.0
CVE-2007-3123

unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted R…

Patch available
Fix from $1,600 2007-06-07
Clamav HIGH 7.8
CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file.

Patch available
Fix from $1,950 2007-04-30
Clamav HIGH 7.5
CVE-2007-1997EPSS 5%

Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remot…

Patch available
Fix from $1,950 2007-04-16
Clamav HIGH 7.1
CVE-2007-1745

The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact…

Fix: after 0.90.1
Fix from $1,950 2007-04-16
Clamav MEDIUM 6.4
CVE-2007-0898

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot do…

Fix: after 0.88.6
Fix from $1,600 2007-02-16
Clamav MEDIUM 5.0
CVE-2006-6481

Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application crash) by wrapping many layers of…

Mitigation only
Fix from $1,600 2006-12-12
Clamav MEDIUM 5.0
CVE-2006-5874

Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment …

Fix: after 0.88
Fix from $1,600 2006-12-10
Clamav MEDIUM 5.0
CVE-2006-6406

Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a mul…

No fix yet
Fix from $1,600 2006-12-10
Clamav HIGH 7.5
CVE-2006-4182EPSS 20%

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning servic…

Fix: after 0.88.4
Fix from $1,950 2006-10-16
Clamav MEDIUM 5.0
CVE-2006-5295EPSS 11%

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compres…

Fix: after 0.88.4
Fix from $1,600 2006-10-16
Clamav HIGH 7.2
CVE-2006-2427

freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command l…

No fix yet
Fix from $1,950 2006-05-17