Approved changes feed: RSS · Atom

cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*

part: a version: . update: *

VendorClam Anti Virus (bc16f80d-606b-5394-9f95-a7d70b799dfb)
ProductClamav (9d4f22ea-2031-587d-8b95-6f1d422cdcec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:10:59.935223
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:10:59.935225
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:10:59.935226
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:10:59.935228
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:10:59.935229

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5874 vulnerable 2026-06-08 04:49:21.563570 Details available
Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.
Published: 2006-12-10T02:00:00.000Z
Updated: 2024-08-07T20:04:55.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5295 vulnerable 2026-06-08 04:49:20.213222 Details available
Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."
Published: 2006-10-16T23:00:00.000Z
Updated: 2024-08-07T19:48:28.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4182 vulnerable 2026-06-08 04:49:11.161508 Details available
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
Published: 2006-10-16T23:00:00.000Z
Updated: 2024-08-07T18:57:46.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0162 vulnerable 2026-06-08 04:48:46.071013 Details available
Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.
Published: 2006-01-10T19:00:00.000Z
Updated: 2024-08-07T16:25:34.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3239 vulnerable 2026-06-08 04:48:39.970495 Details available
The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.
Published: 2005-10-14T04:00:00.000Z
Updated: 2024-08-07T23:01:59.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.