Approved changes feed: RSS · Atom

cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*

part: a version: 0.92 update: *

VendorClam Anti Virus (bc16f80d-606b-5394-9f95-a7d70b799dfb)
ProductClamav (9d4f22ea-2031-587d-8b95-6f1d422cdcec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:11:00.069023
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:11:00.069025
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:11:00.069027
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:11:00.069028
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:11:00.069029

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5314 vulnerable 2026-06-08 04:50:50.768980 Details available
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.
Published: 2008-12-03T17:00:00.000Z
Updated: 2024-08-07T10:49:12.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5050 vulnerable 2026-06-08 04:50:49.272147 Details available
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Published: 2008-11-13T01:00:00.000Z
Updated: 2024-08-07T10:40:16.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1837 vulnerable 2026-06-08 04:50:22.058742 Details available
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1836 vulnerable 2026-06-08 04:50:22.056969 Details available
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:58.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1835 vulnerable 2026-06-08 04:50:22.056216 Details available
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
Published: 2008-04-16T16:00:00.000Z
Updated: 2024-08-07T08:40:59.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1389 vulnerable 2026-06-08 04:50:20.409571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1387 vulnerable 2026-06-08 04:50:20.376103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1100 vulnerable 2026-06-08 04:50:18.895833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6596 vulnerable 2026-06-08 04:50:09.166746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6595 vulnerable 2026-06-08 04:50:09.166328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.