CVE-2008-1837: clam_anti-virus clamav Resource Management Errors
CVSS: 5.0v2.0MediumModified
Published 16-04-2008Last modified 07-08-2024
Vulnerability summary
CVE-2008-1837 is a medium (CVSS 5.0) Resource Management Errors vulnerability in clam_anti-virus clamav. EPSS estimates a 4.76% chance of exploitation in the next 30 days, higher than 91.7% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
4.76%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 16-04-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
4.76%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.76% on 18-09-2026
18-09-202618-10-2026
EPSS score4.76%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Clam_anti-virus1 product
- clamav≤ 0.92.1 | 0.15 | 0.20 | 0.21 | 0.22 | 0.23 | 0.24 | 0.51 | 0.52 | 0.53 | 0.54 | 0.60 | 0.60p | 0.65 | 0.67 | 0.68 | 0.68.1 | 0.70 | 0.71 | 0.72 | 0.73 | 0.74 | 0.75 | 0.75.1 | 0.80 | 0.80_rc1 | 0.80_rc2 | 0.80_rc3 | 0.80_rc4 | 0.81 | 0.81_rc1 | 0.82 | 0.83 | 0.84 | 0.84_rc1 | 0.84_rc2 | 0.85 | 0.85.1 | 0.86 | 0.86.1 | 0.86.2 | 0.86_rc1 | 0.87 | 0.87.1 | 0.88 | 0.88.1 | 0.88.3 | 0.88.4 | 0.88.5 | 0.88.6 | 0.88.7 | 0.90 | 0.90.1 | 0.90.2 | 0.90_rc1.1 | 0.90_rc2 | 0.90_rc3 | 0.90rc1 | 0.91 | 0.91.1 | 0.91.2 | 0.91rc1 | 0.91rc2 | 0.92
1 vendor · 1 product
References
15 links- up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.htmlX Refsource CONFIRM
- www.us-cert.gov/cas/techalerts/TA08-260A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- wwws.clamav.net/bugzilla/show_bug.cgi?id=898X Refsource CONFIRM