CVE-2009-1241: clamav

EPSS trend

Probability

3.92%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.92% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

12 links

www.mandriva.com/security/advisories?name=MDVSA-2009:097Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.vupen.com/english/advisories/2009/0934VDB EntryX Refsource VUPENPermissions Required
www.securityfocus.com/bid/34344VDB EntryX Refsource BIDThird Party Advisory
www.securityfocus.com/archive/1/502366/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
blog.zoller.lu/2009/04/clamav-094-and-below-evasion-and-bypass.htmlX Refsource MISCThird Party Advisory
www.openwall.com/lists/oss-security/2009/04/07/6Mailing ListX Refsource MLISTThird Party Advisory
support.apple.com/kb/HT3865X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/36701Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory

Show all 12 references

security-tracker.debian.org/tracker/CVE-2009-1241Advisory
nvd.nist.gov/vuln/detail/CVE-2009-1241OvalAdvisory

Related vulnerabilities

MediumCVE-2018-1000085Alpine Linuxalpine · clamav +5 more8y agoalpine clamavClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This vulnerability appears to have been fixed in after commit d96a6b8bcc7439fa7e3876207aa0a8e79c8451b6.EPSS1.61%MediumCVE-2018-0360Alpine Linuxalpine · clamav +5 more8y agoalpine clamavClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c.EPSS1.71%MediumCVE-2018-0202Alpine Linuxalpine · clamav +5 more8y agoalpine clamavclamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.EPSS2.58%MediumCVE-2018-0361Alpine Linuxalpine · clamav +4 more8y agoalpine clamavClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file.EPSS1.60%MediumCVE-2018-15378Alpine Linuxalpine · clamav +7 more8y agoClam AntiVirus unmew11() Denial of Service VulnerabilityA vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploited to trigger an invalid read memory access via a specially crafted EXE file.EPSS1.31%MediumCVE-2013-2020canonical · ubuntu_linux +3 more13y agocanonical ubuntu_linuxInteger underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.EPSS3.55%

All vulnerabilities inclamav

CVE-2009-1241: clamav

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References