CVE-2008-1836: clam_anti-virus clamav

EPSS trend

Probability

3.55%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.55% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

16 links

www.mandriva.com/security/advisories?name=MDVSA-2008:088Vendor AdvisoryX Refsource MANDRIVA
wwws.clamav.net/bugzilla/show_bug.cgi?id=881X Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2008-May/msg00249.htmlVendor AdvisoryX Refsource FEDORA
security.gentoo.org/glsa/glsa-200805-19.xmlVendor AdvisoryX Refsource GENTOO
lists.apple.com/archives/security-announce//2008/Sep/msg00005.htmlVendor AdvisoryX Refsource APPLE
up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.htmlX Refsource CONFIRM
secunia.com/advisories/29891Third Party AdvisoryX Refsource SECUNIA
www.us-cert.gov/cas/techalerts/TA08-260A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/bid/28784VDB EntryX Refsource BID
www.vupen.com/english/advisories/2008/2584VDB EntryX Refsource VUPEN

Show all 16 references

secunia.com/advisories/31882Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30328Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/41868VDB EntryX Refsource XF
secunia.com/advisories/30253Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31576Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.htmlVendor AdvisoryX Refsource SUSE

Related vulnerabilities

CVE-2007-4560clam_anti-virusclamav+183.54%19y ago28-08-2007 01:00clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."CVE-2007-4510clam_anti-virusclamav+21.97%19y ago23-08-2007 19:00ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.CVE-2005-1795clam_anti-virusclamav3.64%21y ago01-06-2005 04:00The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked.CVE-2005-3239clam_anti-virusclamav+14.48%21y ago14-10-2005 04:00The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.CVE-2008-2713clam_anti-virusclamav+14.71%18y ago16-06-2008 21:00libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.CVE-2008-1837clam_anti-virusclamav4.76%18y ago16-04-2008 16:00libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.

All vulnerabilities inclamav

CVE-2008-1836: clam_anti-virus clamav

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References