Search for packages
| purl | pkg:deb/debian/clamav@0.90.1-2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 7.8 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1346-uavy-pbdb
Aliases: CVE-2019-1787 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-2aju-u36p-gug9
Aliases: CVE-2022-20796 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-2r3h-sgxr-ffdz
Aliases: CVE-2010-1311 |
Multiple vulnerabilities have been reported in Clam AntiVirus. |
Affected by 60 other vulnerabilities. |
|
VCID-32nc-x9aw-a3fb
Aliases: CVE-2019-12625 |
ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system. |
Affected by 20 other vulnerabilities. |
|
VCID-3g47-n64z-bqbb
Aliases: CVE-2009-1241 |
clamav: security fixes in upstream 0.95 (CVE-2008-6680, CVE-2009-1270) |
Affected by 60 other vulnerabilities. |
|
VCID-3rrt-vgz7-8bgz
Aliases: CVE-2015-2221 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-3uwh-y2m1-nugc
Aliases: CVE-2018-1000085 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-3v58-x48y-jug2
Aliases: CVE-2007-1745 |
Multiple vulnerabilities have been discovered in ClamAV allowing for the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-4eva-e818-yfgq
Aliases: CVE-2016-1405 |
libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503. |
Affected by 33 other vulnerabilities. |
|
VCID-4nbm-18gn-q7bt
Aliases: CVE-2013-2020 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 60 other vulnerabilities. |
|
VCID-4z4r-2w8m-r7dz
Aliases: CVE-2023-20032 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-4zzn-3akx-qyav
Aliases: CVE-2008-2713 |
Multiple vulnerabilities in ClamAV may result in a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-5hnm-hz17-2bey
Aliases: CVE-2019-15961 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-5tr5-pbwa-kyhs
Aliases: CVE-2015-1463 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 54 other vulnerabilities. |
|
VCID-5ye8-ycmx-6qga
Aliases: CVE-2007-4560 |
Vulnerabilities have been discovered in ClamAV allowing remote execution of arbitrary code and Denial of Service attacks. |
Affected by 87 other vulnerabilities. |
|
VCID-63vt-1nc8-6kfc
Aliases: CVE-2025-20260 |
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. This vulnerability exists because memory buffers are allocated incorrectly when PDF files are processed. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to trigger a buffer overflow, likely resulting in the termination of the ClamAV scanning process and a DoS condition on the affected software. Although unproven, there is also a possibility that an attacker could leverage the buffer overflow to execute arbitrary code with the privileges of the ClamAV process. |
Affected by 1 other vulnerability. |
|
VCID-6vfe-sqh5-33fd
Aliases: CVE-2012-1459 PYSEC-2012-26 |
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations. |
Affected by 60 other vulnerabilities. |
|
VCID-7dcd-v8q9-b3bv
Aliases: CVE-2018-15378 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-89nm-dhhw-rudd
Aliases: CVE-2010-1640 |
Multiple vulnerabilities have been reported in Clam AntiVirus. |
Affected by 60 other vulnerabilities. |
|
VCID-8dsa-zr5u-vya3
Aliases: CVE-2007-6745 |
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2. |
Affected by 87 other vulnerabilities. |
|
VCID-8j4p-qa4k-g3ee
Aliases: CVE-2013-7088 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 60 other vulnerabilities. |
|
VCID-8s2g-2brb-tfhq
Aliases: CVE-2019-1786 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-8vyy-rhvj-9uba
Aliases: CVE-2007-3725 |
A vulnerability has been discovered in ClamAV, allowing for a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-8y9g-m17c-kyey
Aliases: CVE-2016-1371 |
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable. |
Affected by 33 other vulnerabilities. |
|
VCID-93n4-278h-dydh
Aliases: CVE-2008-5314 |
Two vulnerabilities in ClamAV may allow for the remote execution of arbitrary code or a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-9yte-e44v-skb7
Aliases: CVE-2007-3023 |
ClamAV contains several vulnerabilities leading to a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-a4nz-5cr8-13an
Aliases: CVE-2019-1789 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-a759-t1gf-y7b3
Aliases: CVE-2011-3627 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-aagg-bbac-rfez
Aliases: CVE-2017-6420 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-age6-uz2c-5kb7
Aliases: CVE-2010-1639 |
Multiple vulnerabilities have been reported in Clam AntiVirus. |
Affected by 60 other vulnerabilities. |
|
VCID-auz9-64vf-7qdp
Aliases: CVE-2008-5050 |
Two vulnerabilities in ClamAV may allow for the remote execution of arbitrary code or a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-avvd-1gv9-eyb9
Aliases: CVE-2018-0202 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-axqc-hqfs-1fg1
Aliases: CVE-2008-0318 |
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-azhe-cxb8-3kbb
Aliases: CVE-2010-0405 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-b43h-aewb-hqfh
Aliases: CVE-2007-6337 |
Multiple vulnerabilities have been discovered in ClamAV allowing remote execution of arbitrary code and Denial of Service attacks. |
Affected by 87 other vulnerabilities. |
|
VCID-b8av-4cra-33em
Aliases: CVE-2012-1457 PYSEC-2012-25 |
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field that exceeds the total TAR file size. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations. |
Affected by 60 other vulnerabilities. |
|
VCID-bcbq-sbmz-ayd1
Aliases: CVE-2014-9328 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 54 other vulnerabilities. |
|
VCID-beus-rm7h-3qga
Aliases: CVE-2013-6497 |
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file. |
Affected by 54 other vulnerabilities. |
|
VCID-c9ze-8411-kfb7
Aliases: CVE-2010-3434 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-cc9p-w184-zfej
Aliases: CVE-2020-3327 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-ccdb-7g4p-bugy
Aliases: CVE-2008-1100 |
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-cexz-mrrc-v3gp
Aliases: CVE-2013-2021 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 60 other vulnerabilities. |
|
VCID-d3u3-epeb-guh9
Aliases: CVE-2023-20052 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-dfvv-cqbj-mubr
Aliases: CVE-2015-2222 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-dn26-zfsc-ryec
Aliases: CVE-2022-20785 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-e3qs-51ap-nkbz
Aliases: CVE-2011-2721 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-edx7-wgfh-cuaq
Aliases: CVE-2007-3122 |
ClamAV contains several vulnerabilities leading to a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-egd5-p68y-wfdy
Aliases: CVE-2021-1404 |
A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-emwr-t3hg-xqdx
Aliases: CVE-2008-3215 |
Multiple vulnerabilities in ClamAV may result in a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-et1s-49mc-v7ej
Aliases: CVE-2007-6336 |
Multiple vulnerabilities have been discovered in ClamAV allowing remote execution of arbitrary code and Denial of Service attacks. |
Affected by 87 other vulnerabilities. |
|
VCID-f8wt-f14e-s7d6
Aliases: CVE-2008-3913 |
Multiple vulnerabilities in ClamAV may result in a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-fmz4-958p-xqe6
Aliases: CVE-2010-4479 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-fp31-7krz-abbs
Aliases: CVE-2022-20770 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-fsn5-241x-f7b2
Aliases: CVE-2009-1372 |
Multiple vulnerabilities in ClamAV allow for the remote execution of arbitrary code or Denial of Service. |
Affected by 60 other vulnerabilities. |
|
VCID-fvmm-4zme-a3at
Aliases: CVE-2007-2029 |
File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file. |
Affected by 87 other vulnerabilities. |
|
VCID-gg41-q6x3-bbbw
Aliases: CVE-2015-2668 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-ggz7-h35v-p7ep
Aliases: CVE-2024-20505 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 1 other vulnerability. |
|
VCID-guz8-mfzu-uuc9
Aliases: CVE-2017-6419 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-h46v-x33x-t3ep
Aliases: CVE-2018-0360 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-hch1-2kkj-qubf
Aliases: CVE-2007-6596 |
clamav does not recognize Base64-UUEncoded files |
Affected by 87 other vulnerabilities. |
|
VCID-hk1f-z2vm-dfeq
Aliases: CVE-2011-1003 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-j2gt-uvam-hufk
Aliases: CVE-2017-12377 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-j6w1-zy8u-sbc1
Aliases: CVE-2008-6680 |
Multiple vulnerabilities in ClamAV allow for the remote execution of arbitrary code or Denial of Service. |
Affected by 60 other vulnerabilities. |
|
VCID-jn71-tnyw-cqdu
Aliases: CVE-2008-6845 |
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file. |
Affected by 87 other vulnerabilities. |
|
VCID-k8az-72sh-cuer
Aliases: CVE-2007-2650 |
ClamAV contains several vulnerabilities leading to a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-ku97-h544-fua1
Aliases: CVE-2007-1997 |
Multiple vulnerabilities have been discovered in ClamAV allowing for the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-kurn-1uay-qqap
Aliases: CVE-2022-20792 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-m5un-q736-5khr
Aliases: CVE-2010-4260 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-mdfk-5ked-t3bu
Aliases: CVE-2023-20197 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-mu6w-nub4-z3ef
Aliases: CVE-2022-20698 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 12 other vulnerabilities. |
|
VCID-mufb-kvfq-mubz
Aliases: CVE-2019-1785 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-n51n-m2r7-kbdy
Aliases: CVE-2019-12900 |
bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). |
Affected by 20 other vulnerabilities. |
|
VCID-new8-u5x9-nkeb
Aliases: CVE-2021-1405 |
A vulnerability in ClamAV could lead to a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-ntvt-zdsj-1fgt
Aliases: CVE-2017-6418 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-nu3x-4yc8-ufg6
Aliases: CVE-2018-0361 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-p21f-gaf4-3bcw
Aliases: CVE-2008-0314 |
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-p4qp-2b79-akhw
Aliases: CVE-2008-0728 |
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-p5hg-2rdb-z3hq
Aliases: CVE-2019-1788 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-p5qn-njcb-1fdr
Aliases: CVE-2015-1461 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 54 other vulnerabilities. |
|
VCID-pty8-xunq-huf3
Aliases: CVE-2008-3914 |
Multiple vulnerabilities in ClamAV may result in a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-pwm2-bk7k-j7cm
Aliases: CVE-2015-1462 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 54 other vulnerabilities. |
|
VCID-pzw9-7mr3-kugx
Aliases: CVE-2014-9050 |
A vulnerability in Clam AntiVirus can lead to a Denial of Service condition. |
Affected by 54 other vulnerabilities. |
|
VCID-q9rb-p3vk-5uaa
Aliases: CVE-2007-6595 |
Multiple vulnerabilities in ClamAV may result in a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-qacw-bby8-9kdg
Aliases: CVE-2019-1798 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-qc9z-s9xt-1baw
Aliases: CVE-2009-1270 |
Multiple vulnerabilities in ClamAV allow for the remote execution of arbitrary code or Denial of Service. |
Affected by 60 other vulnerabilities. |
|
VCID-qvz2-bk3f-7bch
Aliases: CVE-2012-1419 |
The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases] character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations. |
Affected by 60 other vulnerabilities. |
|
VCID-qwwa-mf8k-2fdc
Aliases: CVE-2017-12378 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-rdv9-ec51-9qg9
Aliases: CVE-2009-1371 |
Multiple vulnerabilities in ClamAV allow for the remote execution of arbitrary code or Denial of Service. |
Affected by 60 other vulnerabilities. |
|
VCID-sbbh-2bet-gyaz
Aliases: CVE-2012-1458 |
The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CHM parser implementations. |
Affected by 60 other vulnerabilities. |
|
VCID-seed-bera-73ez
Aliases: CVE-2017-12379 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-ssb2-q4q7-hqhh
Aliases: CVE-2007-3024 |
ClamAV contains several vulnerabilities leading to a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-tpcz-e492-efdk
Aliases: CVE-2010-0098 |
Multiple vulnerabilities have been reported in Clam AntiVirus. |
Affected by 60 other vulnerabilities. |
|
VCID-tzph-y73s-6qb9
Aliases: CVE-2022-20771 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-tzrt-nka9-67hh
Aliases: CVE-2010-4261 |
Multiple vulnerabilities were found in Clam AntiVirus, the most severe of which may allow the execution of arbitrary code. |
Affected by 60 other vulnerabilities. |
|
VCID-u3pj-kant-effb
Aliases: CVE-2020-3123 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-u4qp-vcnh-c3dd
Aliases: CVE-2017-12374 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-umkp-zyee-sqac
Aliases: CVE-2007-3123 |
ClamAV contains several vulnerabilities leading to a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-uzg5-a999-afhp
Aliases: CVE-2015-2305 |
security update |
Affected by 49 other vulnerabilities. |
|
VCID-uzyz-uw16-7ufk
Aliases: CVE-2015-2170 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-v7xg-3h2f-1yd2
Aliases: CVE-2013-7087 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 60 other vulnerabilities. |
|
VCID-vbmy-urt6-myha
Aliases: CVE-2020-3341 |
A vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a stack buffer overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-vdhk-r67a-s3fr
Aliases: CVE-2025-20128 |
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer underflow in a bounds check that allows for a heap buffer overflow read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the . Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. |
Affected by 1 other vulnerability. |
|
VCID-vqyc-hxfb-ufav
Aliases: CVE-2016-1372 |
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file. |
Affected by 33 other vulnerabilities. |
|
VCID-wjvc-p75d-p3a9
Aliases: CVE-2024-20506 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 1 other vulnerability. |
|
VCID-x538-vjsv-3ud8
Aliases: CVE-2008-1389 |
Multiple vulnerabilities in ClamAV may result in a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-xbuy-fyct-tqcz
Aliases: CVE-2007-4510 |
Vulnerabilities have been discovered in ClamAV allowing remote execution of arbitrary code and Denial of Service attacks. |
Affected by 87 other vulnerabilities. |
|
VCID-xfzw-afgg-fqdc
Aliases: CVE-2020-3481 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-xp7y-un7p-rbgp
Aliases: CVE-2008-3912 |
Multiple vulnerabilities in ClamAV may result in a Denial of Service. |
Affected by 87 other vulnerabilities. |
|
VCID-xwgq-w8k4-xbcn
Aliases: CVE-2021-1252 |
A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in an infinite loop. An attacker could exploit this vulnerability by sending a crafted Excel file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process hang, resulting in a denial of service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-xzye-g5rw-fyh5
Aliases: CVE-2009-3736 |
Multiple vulnerabilities have been found in GraphicsMagick, allowing remote attackers to execute arbitrary code or cause a Denial of Service condition. |
Affected by 60 other vulnerabilities. |
|
VCID-y1wr-yddc-9kf8
Aliases: CVE-2008-1387 |
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-y3k7-e14w-xqbn
Aliases: CVE-2017-12375 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-y4s3-fzav-27g5
Aliases: CVE-2007-6335 |
Multiple vulnerabilities have been discovered in ClamAV allowing remote execution of arbitrary code and Denial of Service attacks. |
Affected by 87 other vulnerabilities. |
|
VCID-y5h1-n12a-ebg5
Aliases: CVE-2013-7089 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 60 other vulnerabilities. |
|
VCID-y5mg-rpf8-cbe7
Aliases: CVE-2017-11423 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-z2zq-jbdg-zke4
Aliases: CVE-2008-1833 |
Multiple vulnerabilities in ClamAV may result in the remote execution of arbitrary code. |
Affected by 87 other vulnerabilities. |
|
VCID-zbkr-bd4m-77cs
Aliases: CVE-2017-12380 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-zeub-1qhs-pyfh
Aliases: CVE-2020-3350 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-zys1-2pnp-h3an
Aliases: CVE-2017-12376 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-14ba-3s5a-2ff3 | Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location." |
CVE-2006-5295
|
| VCID-1vcc-2zf5-tyd1 | Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message. |
CVE-2005-2450
|
| VCID-6cre-dvhv-tyfb | ClamAV contains two vulnerabilities allowing a Denial of Service. |
CVE-2007-0897
|
| VCID-83fz-ctpv-yuew | ClamAV contains multiple vulnerabilities that could lead to remote execution of arbitrary code or cause an application crash. |
CVE-2006-1615
|
| VCID-8qrk-wpj8-ekfk | ClamAV has many security flaws which make it vulnerable to remote execution of arbitrary code and a Denial of Service. |
CVE-2005-3501
|
| VCID-9zc3-mqdn-ufd2 | ClamAV is vulnerable to a heap-based buffer overflow potentially allowing remote execution of arbitrary code and a Denial of Service. |
CVE-2006-4182
|
| VCID-a1px-egkx-qkgd | ClamAV has many security flaws which make it vulnerable to remote execution of arbitrary code and a Denial of Service. |
CVE-2005-3500
|
| VCID-afs1-pn6y-2qej | The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function. |
CVE-2005-3239
|
| VCID-bjvz-w7s1-zfbj | ClamAV has many security flaws which make it vulnerable to remote execution of arbitrary code and a Denial of Service. |
CVE-2005-3587
|
| VCID-eek7-jgkz-akdh | ClamAV is vulnerable to a heap-based buffer overflow resulting in a Denial of Service and potentially remote execution of arbitrary code. |
CVE-2006-4018
|
| VCID-f2br-quyp-v3ax | The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function. |
CVE-2005-1922
|
| VCID-fbpv-4xce-tqa1 | ClamAV contains two vulnerabilities allowing a Denial of Service. |
CVE-2007-0898
|
| VCID-fw2y-5rmc-uyd2 | Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable. |
CVE-2005-2920
|
| VCID-gfff-zanp-aqb9 | ClamAV is vulnerable to Denial of Service. |
CVE-2006-6481
|
| VCID-h776-h6y3-ufcu | Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file. |
CVE-2006-6406
|
| VCID-j4gm-njhq-6ygk | Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference. |
CVE-2006-5874
|
| VCID-kh69-m841-jbbk | There is a possible heap overflow in libclamav/fsg.c before 0.100.0. |
CVE-2007-0899
|
| VCID-pmub-shqe-ubbt | The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file. |
CVE-2005-3303
|
| VCID-pxt8-5rha-kkf8 | ClamAV contains multiple vulnerabilities that could lead to remote execution of arbitrary code or cause an application crash. |
CVE-2006-1630
|
| VCID-s15m-qwrh-bqdq | The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read. |
CVE-2005-1923
|
| VCID-t74n-k2kq-z3hv | ClamAV is vulnerable to a buffer overflow which may lead to remote execution of arbitrary code. |
CVE-2006-0162
|
| VCID-th8f-btfy-1yg4 | The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading. |
CVE-2005-2070
|
| VCID-vdeg-psw7-ckej | Clam AntiVirus is vulnerable to a Denial of Service attack when processing certain Quantum archives. |
CVE-2005-2056
|
| VCID-w94u-kcpw-4ub2 | Freshclam is vulnerable to a buffer overflow that could lead to execution of arbitrary code. |
CVE-2006-1989
|
| VCID-zd3n-bhwe-xqej | ClamAV contains multiple vulnerabilities that could lead to remote execution of arbitrary code or cause an application crash. |
CVE-2006-1614
|
| VCID-zfuc-jbs7-a7c5 | libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite loop) via a crafted FSG packed executable. |
CVE-2005-2919
|