Browse CVEs

HIGH 9.3 CVE-2008-5050EPSS 8% Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to caus… Clamav after 0.94 Fix from $1,9502008-11-13 MEDIUM 5.0 CVE-2008-1389 libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malforme… Clamav after 0.93.3 Fix from $1,6002008-09-04 MEDIUM 5.0 CVE-2008-3215 libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-b… Clamav No fix yet Fix from $1,6002008-07-18 MEDIUM 5.0 CVE-2008-2713 libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bou… Clamav No fix yet Fix from $1,6002008-06-16 MEDIUM 5.0 CVE-2008-1835 ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by Cla… Clamav after 0.92.1 Fix from $1,6002008-04-16 MEDIUM 5.0 CVE-2008-1837 libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems,"… Clamav after 0.92.1 Fix from $1,6002008-04-16 HIGH 7.5 CVE-2008-0314EPSS 9% Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE b… Clamav No fix yet Fix from $1,9502008-04-16 HIGH 7.5 CVE-2008-1833EPSS 9% Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE… Clamav No fix yet Fix from $1,9502008-04-16 HIGH 10.0 CVE-2008-1100EPSS 11% Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code… Clamav Mitigation only Fix from $1,9502008-04-14 HIGH 10.0 CVE-2008-0318EPSS 8% Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of serv… Clamav after 0.92 Fix from $1,9502008-02-12 HIGH 10.0 CVE-2007-6337 Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vec… Clamav Patch available Fix from $1,9502007-12-31 MEDIUM 5.0 CVE-2007-6596 ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file. Clamav Mitigation only Fix from $1,6002007-12-31 HIGH 7.5 CVE-2007-6335EPSS 18% Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which trigger… Clamav after 0.92 Fix from $1,9502007-12-20 MEDIUM 6.8 CVE-2007-6336 Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file. Clamav after 0.91 Fix from $1,6002007-12-20 HIGH 7.5 CVE-2007-6029 Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this info… Clamav No fix yet Fix from $1,9502007-11-20 HIGH 7.6 CVE-2007-4560EPSS 84% clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters th… Clamav after 0.91.1 Fix from $1,9502007-08-28 MEDIUM 5.0 CVE-2007-3025 Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers… Clamav Patch available Fix from $1,6002007-06-07 HIGH 10.0 CVE-2007-3023 unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack… Clamav Patch available Fix from $1,9502007-06-07 MEDIUM 5.0 CVE-2007-3122 The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value… Clamav Patch available Fix from $1,6002007-06-07 MEDIUM 5.0 CVE-2007-3123 unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted R… Clamav Patch available Fix from $1,6002007-06-07 HIGH 7.8 CVE-2007-2029 File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file. Clamav Patch available Fix from $1,9502007-04-30 HIGH 7.5 CVE-2007-1997EPSS 5% Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remot… Clamav Patch available Fix from $1,9502007-04-16 HIGH 7.1 CVE-2007-1745 The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact… Clamav after 0.90.1 Fix from $1,9502007-04-16 MEDIUM 6.4 CVE-2007-0898 Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot do… Clamav after 0.88.6 Fix from $1,6002007-02-16 MEDIUM 5.0 CVE-2006-6481 Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application crash) by wrapping many layers of… Clamav Mitigation only Fix from $1,6002006-12-12 MEDIUM 5.0 CVE-2006-5874 Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment … Clamav after 0.88 Fix from $1,6002006-12-10 MEDIUM 5.0 CVE-2006-6406 Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a mul… Clamav No fix yet Fix from $1,6002006-12-10 HIGH 7.5 CVE-2006-4182EPSS 20% Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning servic… Clamav after 0.88.4 Fix from $1,9502006-10-16 MEDIUM 5.0 CVE-2006-5295EPSS 11% Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compres… Clamav after 0.88.4 Fix from $1,6002006-10-16 HIGH 7.2 CVE-2006-2427 freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command l… Clamav No fix yet Fix from $1,9502006-05-17