Approved changes feed: RSS · Atom

cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorClam Anti Virus (bc16f80d-606b-5394-9f95-a7d70b799dfb)
ProductClamav (9d4f22ea-2031-587d-8b95-6f1d422cdcec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:10:59.933844
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:10:59.933846
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:10:59.933847
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:10:59.933849
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:10:59.933850

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5314 vulnerable 2026-06-08 04:50:50.768003 Details available
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.
Published: 2008-12-03T17:00:00.000Z
Updated: 2024-08-07T10:49:12.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5050 vulnerable 2026-06-08 04:50:49.226099 Details available
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Published: 2008-11-13T01:00:00.000Z
Updated: 2024-08-07T10:40:16.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1837 vulnerable 2026-06-08 04:50:22.057667 Details available
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1835 vulnerable 2026-06-08 04:50:22.044453 Details available
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1389 vulnerable 2026-06-08 04:50:20.378016 Details available
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."
Published: 2008-09-04T16:00:00.000Z
Updated: 2024-08-07T08:17:34.723Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0318 vulnerable 2026-06-08 04:50:10.752038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6336 vulnerable 2026-06-08 04:50:08.576868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6335 vulnerable 2026-06-08 04:50:08.576260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4560 vulnerable 2026-06-08 04:49:56.521183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4510 vulnerable 2026-06-08 04:49:56.434648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1745 vulnerable 2026-06-08 04:49:43.355733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0898 vulnerable 2026-06-08 04:49:33.707268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5874 vulnerable 2026-06-08 04:49:21.563545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5295 vulnerable 2026-06-08 04:49:20.212647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4182 vulnerable 2026-06-08 04:49:11.160936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1795 vulnerable 2026-06-08 04:48:27.523609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.