Vulnerabilities > Clamav > Clamav > 0.9
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-04-23 | CVE-2009-1371 | Improper Input Validation vulnerability in Clamav The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding. | 5.0 |
2009-04-08 | CVE-2009-1270 | Infinite Loop vulnerability in multiple products libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang. | 7.8 |
2009-04-08 | CVE-2008-6680 | Numeric Errors vulnerability in Clamav libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error. | 5.0 |
2009-04-03 | CVE-2009-1241 | Unspecified vulnerability in Clamav Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive. | 7.5 |
2008-09-11 | CVE-2008-3914 | Information Exposure vulnerability in Clamav Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c. | 10.0 |
2008-09-11 | CVE-2008-3913 | Memory Leak vulnerability in multiple products Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to "error handling logic". | 5.0 |
2008-09-11 | CVE-2008-3912 | Resource Management Errors vulnerability in multiple products libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an out-of-memory condition. | 5.0 |
2008-02-12 | CVE-2008-0728 | Resource Management Errors vulnerability in Clamav The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption." | 10.0 |
2007-05-14 | CVE-2007-2650 | Resource Exhaustion vulnerability in multiple products The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file. | 4.3 |
2007-02-16 | CVE-2007-0897 | Missing Release of Resource after Effective Lifetime vulnerability in multiple products Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor. | 7.5 |