Vulnerabilities > Clam Anti Virus > Clamav > 0.90.rc1.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-11-13 | CVE-2008-5050 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Clam Anti-Virus Clamav Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow. | 9.3 |
| 2008-06-16 | CVE-2008-2713 | Resource Management Errors vulnerability in Clam Anti-Virus Clamav libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read. | 5.0 |
| 2008-04-16 | CVE-2008-1837 | Resource Management Errors vulnerability in Clam Anti-Virus Clamav libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats. | 5.0 |
| 2008-04-16 | CVE-2008-1836 | Multiple vulnerability in ClamAV 0.92.1 The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read. network clam-anti-virus | 4.3 |
| 2008-04-16 | CVE-2008-1835 | Improper Input Validation vulnerability in Clam Anti-Virus Clamav ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar. | 5.0 |
| 2008-04-16 | CVE-2008-1387 | Denial Of Service vulnerability in ClamAV ARJ File ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats. network clam-anti-virus | 4.3 |
| 2007-07-12 | CVE-2007-3725 | Unspecified vulnerability in Clam Anti-Virus Clamav The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference. network clam-anti-virus | 4.3 |
| 2007-06-07 | CVE-2007-3025 | Denial-Of-Service vulnerability in ClamAV Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service (hang) via unknown vectors related to the isURL function and regular expressions. | 5.0 |
| 2007-06-07 | CVE-2007-3024 | Multiple Unspecified vulnerability in ClamAV libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cli_gentempstream function in clamd/clamdscan, which might allow local users to read sensitive files. | 2.1 |
| 2007-06-07 | CVE-2007-3123 | Remote Denial Of Service vulnerability in Clam AntiVirus ClamAV RAR Handling unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow. | 5.0 |