ClamAV 0.96.3
Approved changes feed: RSS · Atom
cpe:2.3:a:clamav:clamav:0.96.3:*:*:*:*:*:*:*
part: a version: 0.96.3 update: *
| Vendor | Clamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90) |
|---|---|
| Product | Clamav (6bd50a90-3838-55b3-b790-e75ee7286993) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/clamav |
purl2cpe | 2026-06-01 10:12:02.740557 |
pkg:deb/ubuntu/clamav |
purl2cpe | 2026-06-01 10:12:02.740558 |
pkg:docker/clamav/clamav |
purl2cpe | 2026-06-01 10:12:02.740560 |
pkg:github/cisco-talos/clamav |
purl2cpe | 2026-06-01 10:12:02.740561 |
pkg:rpm/fedora/clamav |
purl2cpe | 2026-06-01 10:12:02.740562 |
pkg:rpm/opensuse/clamav |
purl2cpe | 2026-06-01 10:12:02.740564 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-2020 |
vulnerable | 2026-06-08 05:03:57.893760 |
Details available
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Published: 2013-05-13T23:00:00.000Z
Updated: 2024-08-06T15:20:37.508Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3627 |
vulnerable | 2026-06-08 04:59:26.761572 |
Details available
The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
Published: 2011-11-17T19:00:00.000Z
Updated: 2024-08-06T23:37:48.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2721 |
vulnerable | 2026-06-08 04:58:08.727878 |
Details available
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Published: 2011-08-05T21:00:00.000Z
Updated: 2024-08-06T23:08:23.733Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1003 |
vulnerable | 2026-06-08 04:56:40.675892 |
Details available
Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.
Published: 2011-02-23T18:00:00.000Z
Updated: 2024-08-06T22:14:26.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4479 |
vulnerable | 2026-06-08 04:56:28.691266 |
Details available
Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260.
Published: 2010-12-07T01:00:00.000Z
Updated: 2024-08-07T03:51:17.037Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4261 |
vulnerable | 2026-06-08 04:55:19.622415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4260 |
vulnerable | 2026-06-08 04:55:19.619414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.