Approved changes feed: RSS · Atom

cpe:2.3:a:clam_anti-virus:clamav:0.14:pre:*:*:*:*:*:*

part: a version: 0.14 update: pre

VendorClam Anti Virus (bc16f80d-606b-5394-9f95-a7d70b799dfb)
ProductClamav (9d4f22ea-2031-587d-8b95-6f1d422cdcec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:10:59.952693
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:10:59.952695
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:10:59.952697
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:10:59.952698
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:10:59.952699

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5050 vulnerable 2026-06-08 04:50:49.233323 Details available
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Published: 2008-11-13T01:00:00.000Z
Updated: 2024-08-07T10:40:16.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1389 vulnerable 2026-06-08 04:50:20.380609 Details available
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."
Published: 2008-09-04T16:00:00.000Z
Updated: 2024-08-07T08:17:34.723Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.