CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Clam Anti-virus » Clamav » 0.60 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2008-5050 119 DoS Exec Code Overflow 2008-11-13 2018-10-11
9.3
 None Remote Medium Not required Complete Complete Complete
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
2 CVE-2008-2713 399 DoS 2008-06-16 2017-08-08
5.0
 None Remote Low Not required None None Partial
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.
3 CVE-2008-1837 399 DoS 2008-04-16 2017-08-08
5.0
 None Remote Low Not required None None Partial
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
4 CVE-2008-1835 20 Bypass 2008-04-16 2017-08-08
5.0
 None Remote Low Not required Partial None None
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
5 CVE-2008-1389 399 DoS 2008-09-04 2011-03-08
5.0
 None Remote Low Not required None None Partial
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."
6 CVE-2007-3725 DoS 2007-07-12 2018-10-15
4.3
 None Remote Medium Not required None None Partial
The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.
7 CVE-2007-0898 22 Dir. Trav. 2007-02-16 2017-07-29
6.4
 None Remote Low Not required None Partial Partial
Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
8 CVE-2006-5295 DoS 2006-10-16 2017-07-20
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."
9 CVE-2006-4182 DoS Exec Code Overflow 2006-10-16 2017-07-20
7.5
 None Remote Low Not required Partial Partial Partial
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
10 CVE-2006-1630 DoS 2006-04-06 2017-07-20
5.0
 None Remote Low Not required None None Partial
The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."
11 CVE-2006-1614 DoS Exec Code Overflow 2006-04-06 2018-10-18
5.1
 None Remote High Not required Partial Partial Partial
Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
12 CVE-2006-0162 DoS Exec Code Overflow 2006-01-10 2017-07-20
7.5
 None Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.
13 CVE-2005-3587 2005-11-16 2010-04-02
10.0
 None Remote Low Not required Complete Complete Complete
Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors.
14 CVE-2005-3500 DoS 2005-11-05 2011-03-08
5.0
 None Remote Low Not required None None Partial
The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
15 CVE-2005-0218 Bypass 2005-05-02 2008-09-10
5.0
 None Remote Low Not required None Partial None
ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.
16 CVE-2005-0133 DoS 2005-05-02 2008-09-10
5.0
 None Remote Low Not required None None Partial
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
17 CVE-2004-1876 Exec Code 2004-03-30 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.
18 CVE-2003-0946 DoS Exec Code 2003-12-15 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.
Total number of vulnerabilities : 18   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.