GCVE - cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*

part: a version: 0.90.1_p0 update: *

Vendor	Clamav (`1e757e73-0a07-5655-8f9d-e7b1c408ae90`)
Product	Clamav (`6bd50a90-3838-55b3-b790-e75ee7286993`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/clamav`	purl2cpe	2026-06-01 10:12:02.712534
`pkg:deb/ubuntu/clamav`	purl2cpe	2026-06-01 10:12:02.712535
`pkg:docker/clamav/clamav`	purl2cpe	2026-06-01 10:12:02.712536
`pkg:github/cisco-talos/clamav`	purl2cpe	2026-06-01 10:12:02.712537
`pkg:rpm/fedora/clamav`	purl2cpe	2026-06-01 10:12:02.712539
`pkg:rpm/opensuse/clamav`	purl2cpe	2026-06-01 10:12:02.712540

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-9050`	vulnerable	2026-06-08 05:06:10.806827	Details available Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file. Published: 2014-12-01T15:00:00.000Z Updated: 2024-08-06T13:33:13.419Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html http://www.securityfocus.com/bid/71242 http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144979.html http://secunia.com/advisories/62542	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2020`	vulnerable	2026-06-08 05:03:57.874356	Details available Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read. Published: 2013-05-13T23:00:00.000Z Updated: 2024-08-06T15:20:37.508Z Open on db.gcve.eu Reference links http://secunia.com/advisories/53150 http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2721`	vulnerable	2026-06-08 04:58:08.709218	Details available Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations. Published: 2011-08-05T21:00:00.000Z Updated: 2024-08-06T23:08:23.733Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45382 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.97.2 http://securitytracker.com/id?1025858 https://bugzilla.redhat.com/show_bug.cgi?id=725694	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1003`	vulnerable	2026-06-08 04:56:40.675309	Details available Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information. Published: 2011-02-23T18:00:00.000Z Updated: 2024-08-06T22:14:26.936Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1025100 http://www.securityfocus.com/bid/46470 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob%3Bf=ChangeLog%3Bhb=clamav-0.97 http://osvdb.org/70937 http://openwall.com/lists/oss-security/2011/02/21/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4479`	vulnerable	2026-06-08 04:56:28.669407	Details available Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260. Published: 2010-12-07T01:00:00.000Z Updated: 2024-08-07T03:51:17.037Z Open on db.gcve.eu Reference links http://secunia.com/advisories/42555 http://www.vupen.com/english/advisories/2010/3137 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052401.html https://bugzilla.redhat.com/show_bug.cgi?id=659861 http://www.ubuntu.com/usn/USN-1031-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4261`	vulnerable	2026-06-08 04:55:19.621843	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4260`	vulnerable	2026-06-08 04:55:19.614359	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1372`	vulnerable	2026-06-08 04:51:22.457076	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1371`	vulnerable	2026-06-08 04:51:22.435450	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6845`	vulnerable	2026-06-08 04:51:04.986486	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0728`	vulnerable	2026-06-08 04:50:17.639491	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.