Approved changes feed: RSS · Atom

cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*

part: a version: 0.90_rc3 update: *

VendorClam Anti Virus (bc16f80d-606b-5394-9f95-a7d70b799dfb)
ProductClamav (9d4f22ea-2031-587d-8b95-6f1d422cdcec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:11:00.059479
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:11:00.059481
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:11:00.059483
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:11:00.059484
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:11:00.059485

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5050 vulnerable 2026-06-08 04:50:49.268349 Details available
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Published: 2008-11-13T01:00:00.000Z
Updated: 2024-08-07T10:40:16.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2713 vulnerable 2026-06-08 04:50:31.724705 Details available
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.
Published: 2008-06-16T21:00:00.000Z
Updated: 2024-08-07T09:14:14.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1837 vulnerable 2026-06-08 04:50:22.058626 Details available
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1836 vulnerable 2026-06-08 04:50:22.056914 Details available
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:58.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1835 vulnerable 2026-06-08 04:50:22.053181 Details available
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1387 vulnerable 2026-06-08 04:50:20.374633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3725 vulnerable 2026-06-08 04:49:54.761618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3123 vulnerable 2026-06-08 04:49:53.304063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3122 vulnerable 2026-06-08 04:49:53.303385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3025 vulnerable 2026-06-08 04:49:46.689963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3024 vulnerable 2026-06-08 04:49:46.689514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1997 vulnerable 2026-06-08 04:49:43.960474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.