Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:*

part: a version: 0.84 update: rc1

VendorClamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90)
ProductClamav (6bd50a90-3838-55b3-b790-e75ee7286993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/clamav purl2cpe 2026-06-01 10:12:02.686248
pkg:deb/ubuntu/clamav purl2cpe 2026-06-01 10:12:02.686250
pkg:docker/clamav/clamav purl2cpe 2026-06-01 10:12:02.686251
pkg:github/cisco-talos/clamav purl2cpe 2026-06-01 10:12:02.686252
pkg:rpm/fedora/clamav purl2cpe 2026-06-01 10:12:02.686254
pkg:rpm/opensuse/clamav purl2cpe 2026-06-01 10:12:02.686255

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9050 vulnerable 2026-06-08 05:06:10.791946 Details available
Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.
Published: 2014-12-01T15:00:00.000Z
Updated: 2024-08-06T13:33:13.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2721 vulnerable 2026-06-08 04:58:08.695774 Details available
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Published: 2011-08-05T21:00:00.000Z
Updated: 2024-08-06T23:08:23.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1003 vulnerable 2026-06-08 04:56:40.674868 Details available
Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.
Published: 2011-02-23T18:00:00.000Z
Updated: 2024-08-06T22:14:26.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4479 vulnerable 2026-06-08 04:56:28.653424 Details available
Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260.
Published: 2010-12-07T01:00:00.000Z
Updated: 2024-08-07T03:51:17.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4261 vulnerable 2026-06-08 04:55:19.621362 Details available
Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.
Published: 2010-12-07T01:00:00.000Z
Updated: 2024-08-07T03:34:37.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4260 vulnerable 2026-06-08 04:55:19.609872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3434 vulnerable 2026-06-08 04:55:14.621754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1639 vulnerable 2026-06-08 04:54:09.535835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1311 vulnerable 2026-06-08 04:54:07.134952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0098 vulnerable 2026-06-08 04:51:52.867446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0728 vulnerable 2026-06-08 04:50:17.626976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4018 vulnerable 2026-06-08 04:49:10.715670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1615 vulnerable 2026-06-08 04:48:57.644409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3501 vulnerable 2026-06-08 04:48:41.024423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.