Clam Anti Virus vulnerabilities, page 2
60 vulnerabilities
Known vulnerabilities in Clam Anti Virus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
LowCVE-2005-2056clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.EPSS2.34%HighCVE-2005-2920clam_anti-virus · clamav +1 moreclam_anti-virus clamavBuffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable.EPSS8.23%HighCVE-2005-2450clam_anti-virus · clamav +1 moreclam_anti-virus clamavMultiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.EPSS3.88%MediumCVE-2005-1922clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.EPSS2.53%HighCVE-2005-1711clam_anti-virus · clamav +2 moreclam_anti-virus clamavGibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected.EPSS1.05%LowCVE-2005-1923clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.EPSS1.62%MediumCVE-2005-1800clam_anti-virus · clamavclam_anti-virus clamavCross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php.EPSS3.06%HighCVE-2005-1795clam_anti-virus · clamavclam_anti-virus clamavThe filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked.EPSS3.64%MediumCVE-2005-0218clam_anti-virus · clamav +1 moreclam_anti-virus clamavClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.EPSS2.43%MediumCVE-2005-0133clam_anti-virus · clamav +1 moreclam_anti-virus clamavClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.EPSS2.55%MediumCVE-2005-3500clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.EPSS3.96%CriticalCVE-2005-3587clam_anti-virus · clamav +1 moreclam_anti-virus clamavImproper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors.EPSS2.20%HighCVE-2005-3239clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.EPSS4.48%HighCVE-2005-3303clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.EPSS6.93%MediumCVE-2008-2713clam_anti-virus · clamav +1 moreclam_anti-virus clamavlibclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.EPSS4.71%MediumCVE-2008-1836clam_anti-virus · clamavclam_anti-virus clamavThe rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.EPSS3.55%MediumCVE-2008-1837clam_anti-virus · clamavclam_anti-virus clamavlibclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.EPSS4.76%HighCVE-2008-1833clam_anti-virus · clamav +1 moreclam_anti-virus clamavHeap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.EPSS8.60%MediumCVE-2008-1387clam_anti-virus · clamav +1 moreclam_anti-virus clamavClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.EPSS4.35%MediumCVE-2008-1389clam_anti-virus · clamav +1 moreclam_anti-virus clamavlibclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."EPSS3.38%