Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*

part: a version: 0.90.2 update: *

VendorClamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90)
ProductClamav (6bd50a90-3838-55b3-b790-e75ee7286993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:12:02.712541
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:12:02.712543
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:12:02.712544
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:12:02.712545
pkg:rpm/fedora/clamav purl2cpe 2026-06-01 10:12:02.712547
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:12:02.712548

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9050 vulnerable 2026-06-08 05:06:10.807579 Details available
Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.
Published: 2014-12-01T15:00:00.000Z
Updated: 2024-08-06T13:33:13.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2020 vulnerable 2026-06-08 05:03:57.874890 Details available
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Published: 2013-05-13T23:00:00.000Z
Updated: 2024-08-06T15:20:37.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3627 vulnerable 2026-06-08 04:59:26.743464 Details available
The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
Published: 2011-11-17T19:00:00.000Z
Updated: 2024-08-06T23:37:48.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2721 vulnerable 2026-06-08 04:58:08.709725 Details available
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Published: 2011-08-05T21:00:00.000Z
Updated: 2024-08-06T23:08:23.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1003 vulnerable 2026-06-08 04:56:40.675325 Details available
Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.
Published: 2011-02-23T18:00:00.000Z
Updated: 2024-08-06T22:14:26.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4479 vulnerable 2026-06-08 04:56:28.669936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4261 vulnerable 2026-06-08 04:55:19.621860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4260 vulnerable 2026-06-08 04:55:19.614406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3434 vulnerable 2026-06-08 04:55:14.635084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1639 vulnerable 2026-06-08 04:54:09.536237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1311 vulnerable 2026-06-08 04:54:07.147393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0098 vulnerable 2026-06-08 04:51:52.878973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1372 vulnerable 2026-06-08 04:51:22.457092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1371 vulnerable 2026-06-08 04:51:22.435900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6845 vulnerable 2026-06-08 04:51:04.986949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0728 vulnerable 2026-06-08 04:50:17.639948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.