CVE-2008-3912: clamav Resource Management Errors

EPSS trend

Probability

3.10%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.10% on 22-09-2026

22-09-202622-10-2026

EPSS score

3.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

28 links

secunia.com/advisories/32030Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/31051VDB EntryX Refsource BIDPatchThird Party Advisory
secunia.com/advisories/31982Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/31681VDB EntryX Refsource BIDThird Party Advisory
wwws.clamav.net/bugzilla/show_bug.cgi?id=1141X Refsource MISCBroken Link
www.openwall.com/lists/oss-security/2008/09/04/13Mailing ListX Refsource MLISTThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661X Refsource CONFIRMPatchThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:189Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.openwall.com/lists/oss-security/2008/09/03/2Mailing ListX Refsource MLISTThird Party Advisory

Show all 28 references

www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
secunia.com/advisories/32222Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200809-18.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
kolab.org/security/kolab-vendor-notice-22.txtX Refsource CONFIRMBroken Link
www.securitytracker.com/id?1020828VDB EntryX Refsource SECTRACKThird Party Advisory
www.debian.org/security/2008/dsa-1660Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/32424Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/45056VDB EntryX Refsource XFThird Party Advisory
www.vupen.com/english/advisories/2008/2780VDB EntryX Refsource VUPENPermissions Required
www.vupen.com/english/advisories/2008/2564VDB EntryX Refsource VUPENPermissions Required
secunia.com/advisories/32699Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
support.apple.com/kb/HT3216X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/31906Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
svn.clamav.net/svn/clamav-devel/trunk/ChangeLogX Refsource CONFIRMBroken Link
security-tracker.debian.org/tracker/CVE-2008-3912Advisory
nvd.nist.gov/vuln/detail/CVE-2008-3912OvalAdvisory

Related vulnerabilities

CVE-2018-1000085alpineclamav+51.61%8y ago13-03-2018 15:00ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This vulnerability appears to have been fixed in after commit d96a6b8bcc7439fa7e3876207aa0a8e79c8451b6.CVE-2018-19200debianuriparser+32.32%7y ago12-11-2018 15:00An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.CVE-2018-0360alpineclamav+51.71%8y ago16-07-2018 17:00ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c.CVE-2018-0202alpineclamav+52.58%8y ago27-03-2018 09:00clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.CVE-2018-0361alpineclamav+41.60%8y ago16-07-2018 17:00ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file.CVE-2018-15378alpineclamav+71.31%8y ago15-10-2018 17:00A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploited to trigger an invalid read memory access via a specially crafted EXE file.

All vulnerabilities inclamav debian_linux

CVE-2008-3912: clamav Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References