GCVE - cpe:2.3:a:clamav:clamav:0.96:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:clamav:clamav:0.96:*:*:*:*:*:*:*

part: a version: 0.96 update: *

Vendor	Clamav (`1e757e73-0a07-5655-8f9d-e7b1c408ae90`)
Product	Clamav (`6bd50a90-3838-55b3-b790-e75ee7286993`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/clamav`	purl2cpe	2026-06-01 10:12:02.740525
`pkg:deb/ubuntu/clamav`	purl2cpe	2026-06-01 10:12:02.740526
`pkg:docker/clamav/clamav`	purl2cpe	2026-06-01 10:12:02.740528
`pkg:github/cisco-talos/clamav`	purl2cpe	2026-06-01 10:12:02.740529
`pkg:rpm/fedora/clamav`	purl2cpe	2026-06-01 10:12:02.740531
`pkg:rpm/opensuse/clamav`	purl2cpe	2026-06-01 10:12:02.740532

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-2020`	vulnerable	2026-06-08 05:03:57.891081	Details available Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read. Published: 2013-05-13T23:00:00.000Z Updated: 2024-08-06T15:20:37.508Z Open on db.gcve.eu Reference links http://secunia.com/advisories/53150 http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3627`	vulnerable	2026-06-08 04:59:26.758444	Details available The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c. Published: 2011-11-17T19:00:00.000Z Updated: 2024-08-06T23:37:48.598Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html https://bugzilla.redhat.com/show_bug.cgi?id=746984 http://www.securityfocus.com/bid/50183 http://secunia.com/advisories/46717 http://secunia.com/advisories/46826	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2721`	vulnerable	2026-06-08 04:58:08.725302	Details available Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations. Published: 2011-08-05T21:00:00.000Z Updated: 2024-08-06T23:08:23.733Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45382 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.97.2 http://securitytracker.com/id?1025858 https://bugzilla.redhat.com/show_bug.cgi?id=725694	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1003`	vulnerable	2026-06-08 04:56:40.675809	Details available Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information. Published: 2011-02-23T18:00:00.000Z Updated: 2024-08-06T22:14:26.936Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1025100 http://www.securityfocus.com/bid/46470 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob%3Bf=ChangeLog%3Bhb=clamav-0.97 http://osvdb.org/70937 http://openwall.com/lists/oss-security/2011/02/21/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4479`	vulnerable	2026-06-08 04:56:28.687280	Details available Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260. Published: 2010-12-07T01:00:00.000Z Updated: 2024-08-07T03:51:17.037Z Open on db.gcve.eu Reference links http://secunia.com/advisories/42555 http://www.vupen.com/english/advisories/2010/3137 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052401.html https://bugzilla.redhat.com/show_bug.cgi?id=659861 http://www.ubuntu.com/usn/USN-1031-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4261`	vulnerable	2026-06-08 04:55:19.622332	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4260`	vulnerable	2026-06-08 04:55:19.615665	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3434`	vulnerable	2026-06-08 04:55:14.649891	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1640`	vulnerable	2026-06-08 04:54:09.546640	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.