Lookup for vulnerable packages by Package URL.
| Purl | pkg:ebuild/app-antivirus/clamav@0.97.3 |
| Type | ebuild |
| Namespace | app-antivirus |
| Name | clamav |
| Version | 0.97.3 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 0.98 |
| Latest_non_vulnerable_version | 1.4.1 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-414d-bpz7-uqff |
| vulnerability_id |
VCID-414d-bpz7-uqff |
| summary |
Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka (1) "bb #2358" and (2) "bb #2396." |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-4260
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-414d-bpz7-uqff |
|
| 1 |
| url |
VCID-59vv-9bgn-9qbq |
| vulnerability_id |
VCID-59vv-9bgn-9qbq |
| summary |
Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-4261
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-59vv-9bgn-9qbq |
|
| 2 |
| url |
VCID-74vc-fgtp-muck |
| vulnerability_id |
VCID-74vc-fgtp-muck |
| summary |
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-2721
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-74vc-fgtp-muck |
|
| 3 |
| url |
VCID-7mev-x1rm-e7d8 |
| vulnerability_id |
VCID-7mev-x1rm-e7d8 |
| summary |
Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-1003
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7mev-x1rm-e7d8 |
|
| 4 |
|
| 5 |
| url |
VCID-d69c-ugbh-13ew |
| vulnerability_id |
VCID-d69c-ugbh-13ew |
| summary |
Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party information. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-3434
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-d69c-ugbh-13ew |
|
| 6 |
| url |
VCID-dc5e-7g3m-7yh8 |
| vulnerability_id |
VCID-dc5e-7g3m-7yh8 |
| summary |
Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-4479
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dc5e-7g3m-7yh8 |
|
| 7 |
| url |
VCID-mqcb-rwgw-tug5 |
| vulnerability_id |
VCID-mqcb-rwgw-tug5 |
| summary |
The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2011-3627
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mqcb-rwgw-tug5 |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3 |