Clam Anti Virus vulnerabilities, page 3
60 vulnerabilities
Known vulnerabilities in Clam Anti Virus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
CriticalCVE-2008-1100clam_anti-virus · clamav +1 moreclam_anti-virus clamavBuffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file.EPSS10.86%MediumCVE-2008-1835clam_anti-virus · clamavclam_anti-virus clamavClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.EPSS4.03%CriticalCVE-2008-0318clam_anti-virus · clamav +1 moreclam_anti-virus clamavInteger overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.EPSS7.88%HighCVE-2008-0314clam_anti-virus · clamav +1 moreclam_anti-virus clamavHeap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value.EPSS9.02%CriticalCVE-2008-5050clam_anti-virus · clamav +1 moreclam_anti-virus clamavOff-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.EPSS8.26%MediumCVE-2008-5314clam_anti-virus · clamav +1 moreclam_anti-virus clamavStack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.EPSS8.20%MediumCVE-2008-3215clam_anti-virus · clamav +1 moreclam_anti-virus clamavlibclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.EPSS4.71%MediumCVE-2004-1876clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.EPSS0.58%LowCVE-2004-1909clam_anti-virus · clamav +1 moreclam_anti-virus clamavClaim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR archives, such as those generated by the Beagle/Bagle worm.EPSS1.41%MediumCVE-2004-0270clam_anti-virus · clamav +1 moreclam_anti-virus clamavlibclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.EPSS10.41%HighCVE-2006-2427clam_anti-virus · clamav +1 moreclam_anti-virus clamavfreshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, which allows local users to read portions of arbitrary files when an error message displays the first line of the target file.EPSS0.48%MediumCVE-2006-1989clam_anti-virus · clamav +1 moreclam_anti-virus clamavBuffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.EPSS5.95%MediumCVE-2006-1630clam_anti-virus · clamav +1 moreclam_anti-virus clamavThe cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."EPSS5.32%MediumCVE-2006-1614clam_anti-virus · clamav +1 moreclam_anti-virus clamavInteger overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.EPSS7.81%HighCVE-2006-0162clam_anti-virus · clamav +1 moreclam_anti-virus clamavHeap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.EPSS10.09%HighCVE-2006-4182clam_anti-virus · clamav +1 moreclam_anti-virus clamavInteger overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.EPSS21.40%MediumCVE-2006-5295clam_anti-virus · clamav +1 moreclam_anti-virus clamavUnspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."EPSS11.39%MediumCVE-2006-5874clam_anti-virus · clamav +1 moreclam_anti-virus clamavClam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.EPSS2.67%MediumCVE-2006-6481clam_anti-virus · clamav +1 moreclam_anti-virus clamavClam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application crash) by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406.EPSS3.75%MediumCVE-2006-6406clam_anti-virus · clamav +1 moreclam_anti-virus clamavClam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.EPSS3.26%