CVE-2008-1387: clam_anti-virus clamav

EPSS trend

Probability

4.35%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.35% on 22-09-2026

22-09-202622-10-2026

EPSS score

4.35%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (cert.fi)
Maturity: unknown

References

28 links

www.mandriva.com/security/advisories?name=MDVSA-2008:088Vendor AdvisoryX Refsource MANDRIVA
exchange.xforce.ibmcloud.com/vulnerabilities/41822VDB EntryX Refsource XF
www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/490863/100/0/threadedMailing ListX Refsource BUGTRAQ
security.gentoo.org/glsa/glsa-200805-19.xmlVendor AdvisoryX Refsource GENTOO
lists.apple.com/archives/security-announce//2008/Sep/msg00005.htmlVendor AdvisoryX Refsource APPLE
www.clamav.net/bugzilla/show_bug.cgi?id=897X Refsource CONFIRM
up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.htmlX Refsource CONFIRM
int21.de/cve/CVE-2008-1387-clamav.htmlX Refsource MISC
secunia.com/advisories/29891Third Party AdvisoryX Refsource SECUNIA

Show all 28 references

www.us-cert.gov/cas/techalerts/TA08-260A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/bid/28784VDB EntryX Refsource BID
www.vupen.com/english/advisories/2008/2584VDB EntryX Refsource VUPEN
secunia.com/advisories/31882Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29975Third Party AdvisoryX Refsource SECUNIA
www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.htmlX Refsource MISCExploitPatch
secunia.com/advisories/29863Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30328Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-April/msg00625.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/bid/28782VDB EntryX Refsource BID
secunia.com/advisories/30253Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31576Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1227/referencesVDB EntryX Refsource VUPEN
www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/X Refsource MISC
lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/archives/fedora-package-announce/2008-April/msg00576.htmlVendor AdvisoryX Refsource FEDORA
kolab.org/security/kolab-vendor-notice-20.txtX Refsource CONFIRM
security-tracker.debian.org/tracker/CVE-2008-1387Advisory

Related vulnerabilities

CVE-2007-4560clam_anti-virusclamav+183.54%19y ago28-08-2007 01:00clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."CVE-2007-4510clam_anti-virusclamav+21.97%19y ago23-08-2007 19:00ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.CVE-2005-1795clam_anti-virusclamav3.64%21y ago01-06-2005 04:00The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked.CVE-2005-3239clam_anti-virusclamav+14.48%21y ago14-10-2005 04:00The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.CVE-2008-2713clam_anti-virusclamav+14.71%18y ago16-06-2008 21:00libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.CVE-2008-1836clam_anti-virusclamav3.55%18y ago16-04-2008 16:00The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.

All vulnerabilities inclamav

CVE-2008-1387: clam_anti-virus clamav

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References