Approved changes feed: RSS · Atom

cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*

part: a version: 0.71 update: *

VendorClam Anti Virus (bc16f80d-606b-5394-9f95-a7d70b799dfb)
ProductClamav (9d4f22ea-2031-587d-8b95-6f1d422cdcec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:10:59.980265
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:10:59.980267
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:10:59.980269
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:10:59.980270
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:10:59.980271

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5314 vulnerable 2026-06-08 04:50:50.768048 Details available
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.
Published: 2008-12-03T17:00:00.000Z
Updated: 2024-08-07T10:49:12.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5050 vulnerable 2026-06-08 04:50:49.242115 Details available
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Published: 2008-11-13T01:00:00.000Z
Updated: 2024-08-07T10:40:16.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2713 vulnerable 2026-06-08 04:50:31.706554 Details available
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.
Published: 2008-06-16T21:00:00.000Z
Updated: 2024-08-07T09:14:14.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1837 vulnerable 2026-06-08 04:50:22.057984 Details available
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1835 vulnerable 2026-06-08 04:50:22.044790 Details available
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1389 vulnerable 2026-06-08 04:50:20.389410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3725 vulnerable 2026-06-08 04:49:54.745769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0898 vulnerable 2026-06-08 04:49:33.716215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5295 vulnerable 2026-06-08 04:49:20.222322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4182 vulnerable 2026-06-08 04:49:11.170191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3587 vulnerable 2026-06-08 04:48:41.294034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3500 vulnerable 2026-06-08 04:48:40.987162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2920 vulnerable 2026-06-08 04:48:30.862278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2919 vulnerable 2026-06-08 04:48:30.854758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.