Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*

part: a version: 0.90.3_p0 update: *

VendorClamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90)
ProductClamav (6bd50a90-3838-55b3-b790-e75ee7286993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:12:02.712566
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:12:02.712567
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:12:02.712568
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:12:02.712570
pkg:rpm/fedora/clamav purl2cpe 2026-06-01 10:12:02.712571
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:12:02.712572

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9050 vulnerable 2026-06-08 05:06:10.809069 Details available
Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.
Published: 2014-12-01T15:00:00.000Z
Updated: 2024-08-06T13:33:13.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2020 vulnerable 2026-06-08 05:03:57.876489 Details available
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Published: 2013-05-13T23:00:00.000Z
Updated: 2024-08-06T15:20:37.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2721 vulnerable 2026-06-08 04:58:08.711190 Details available
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Published: 2011-08-05T21:00:00.000Z
Updated: 2024-08-06T23:08:23.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1003 vulnerable 2026-06-08 04:56:40.675375 Details available
Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.
Published: 2011-02-23T18:00:00.000Z
Updated: 2024-08-06T22:14:26.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4479 vulnerable 2026-06-08 04:56:28.671786 Details available
Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260.
Published: 2010-12-07T01:00:00.000Z
Updated: 2024-08-07T03:51:17.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4261 vulnerable 2026-06-08 04:55:19.621907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4260 vulnerable 2026-06-08 04:55:19.615218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3434 vulnerable 2026-06-08 04:55:14.636189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1372 vulnerable 2026-06-08 04:51:22.457141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1371 vulnerable 2026-06-08 04:51:22.437344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6845 vulnerable 2026-06-08 04:51:04.988406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0728 vulnerable 2026-06-08 04:50:17.641376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.