ClamAV 0.96.5
Approved changes feed: RSS · Atom
cpe:2.3:a:clamav:clamav:0.96.5:*:*:*:*:*:*:*
part: a version: 0.96.5 update: *
| Vendor | Clamav (1e757e73-0a07-5655-8f9d-e7b1c408ae90) |
|---|---|
| Product | Clamav (6bd50a90-3838-55b3-b790-e75ee7286993) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/clamav |
purl2cpe | 2026-06-01 10:12:02.740573 |
pkg:deb/ubuntu/clamav |
purl2cpe | 2026-06-01 10:12:02.740575 |
pkg:docker/clamav/clamav |
purl2cpe | 2026-06-01 10:12:02.740576 |
pkg:github/cisco-talos/clamav |
purl2cpe | 2026-06-01 10:12:02.740577 |
pkg:rpm/fedora/clamav |
purl2cpe | 2026-06-01 10:12:02.740579 |
pkg:rpm/opensuse/clamav |
purl2cpe | 2026-06-01 10:12:02.740580 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-2020 |
vulnerable | 2026-06-08 05:03:57.895004 |
Details available
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Published: 2013-05-13T23:00:00.000Z
Updated: 2024-08-06T15:20:37.508Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3627 |
vulnerable | 2026-06-08 04:59:26.762800 |
Details available
The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
Published: 2011-11-17T19:00:00.000Z
Updated: 2024-08-06T23:37:48.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2721 |
vulnerable | 2026-06-08 04:58:08.728934 |
Details available
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Published: 2011-08-05T21:00:00.000Z
Updated: 2024-08-06T23:08:23.733Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.