Lucene search

[email protected]CVE-2009-1372

HistoryApr 23, 2009 - 3:30 p.m.

CVE-2009-1372

2009-04-2315:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1372

buffer overflow

clamav

remote code execution

denial of service

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.163 Low

EPSS

Percentile

96.0%

JSON

Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL.

Affected configurations

NVD

Node

clamavclamavRange≤0.95src2

clamavclamavMatch0.01

clamavclamavMatch0.02

clamavclamavMatch0.3

clamavclamavMatch0.03

clamavclamavMatch0.05

clamavclamavMatch0.8_rc3

clamavclamavMatch0.9_rc1

clamavclamavMatch0.10

clamavclamavMatch0.12

clamavclamavMatch0.13

clamavclamavMatch0.14pre

clamavclamavMatch0.15

clamavclamavMatch0.20

clamavclamavMatch0.21

clamavclamavMatch0.22

clamavclamavMatch0.23

clamavclamavMatch0.24

clamavclamavMatch0.51

clamavclamavMatch0.52

clamavclamavMatch0.53

clamavclamavMatch0.54

clamavclamavMatch0.60

clamavclamavMatch0.60p

clamavclamavMatch0.65

clamavclamavMatch0.66

clamavclamavMatch0.67

clamavclamavMatch0.67-1

clamavclamavMatch0.68

clamavclamavMatch0.68.1

clamavclamavMatch0.70

clamavclamavMatch0.70rc

clamavclamavMatch0.71

clamavclamavMatch0.72

clamavclamavMatch0.73

clamavclamavMatch0.74

clamavclamavMatch0.75

clamavclamavMatch0.75.1

clamavclamavMatch0.80

clamavclamavMatch0.80rc4

clamavclamavMatch0.80_rc

clamavclamavMatch0.80_rc1

clamavclamavMatch0.80_rc2

clamavclamavMatch0.80_rc3

clamavclamavMatch0.81

clamavclamavMatch0.81_rc1

clamavclamavMatch0.82

clamavclamavMatch0.83

clamavclamavMatch0.84

clamavclamavMatch0.84_rc1

clamavclamavMatch0.84_rc2

clamavclamavMatch0.85

clamavclamavMatch0.85.1

clamavclamavMatch0.86

clamavclamavMatch0.86.1

clamavclamavMatch0.86.2

clamavclamavMatch0.86_rc1

clamavclamavMatch0.87

clamavclamavMatch0.87.1

clamavclamavMatch0.88

clamavclamavMatch0.88.1

clamavclamavMatch0.88.2

clamavclamavMatch0.88.3

clamavclamavMatch0.88.4

clamavclamavMatch0.88.5

clamavclamavMatch0.88.6

clamavclamavMatch0.88.7

clamavclamavMatch0.88.7_p0

clamavclamavMatch0.88.7_p1

clamavclamavMatch0.90

clamavclamavMatch0.90.1

clamavclamavMatch0.90.1_p0

clamavclamavMatch0.90.2

clamavclamavMatch0.90.2_p0

clamavclamavMatch0.90.3

clamavclamavMatch0.90.3_p0

clamavclamavMatch0.90.3_p1

clamavclamavMatch0.90_rc1

clamavclamavMatch0.90_rc1.1

clamavclamavMatch0.90_rc2

clamavclamavMatch0.90_rc3

clamavclamavMatch0.91

clamavclamavMatch0.91.1

clamavclamavMatch0.91.2

clamavclamavMatch0.91.2_p0

clamavclamavMatch0.91_rc1

clamavclamavMatch0.91_rc2

clamavclamavMatch0.92

clamavclamavMatch0.92.1

clamavclamavMatch0.92_p0

clamavclamavMatch0.93

clamavclamavMatch0.93.1

clamavclamavMatch0.93.2

clamavclamavMatch0.93.3

clamavclamavMatch0.94

clamavclamavMatch0.94.1

clamavclamavMatch0.94.2

clamavclamavMatch0.95

clamavclamavMatch0.95src1

CPENameOperatorVersion
clamav:clamavclamavle0.95
clamav:clamavclamaveq0.01
clamav:clamavclamaveq0.02
clamav:clamavclamaveq0.3
clamav:clamavclamaveq0.03
clamav:clamavclamaveq0.05
clamav:clamavclamaveq0.8_
clamav:clamavclamaveq0.9_rc1
clamav:clamavclamaveq0.10
clamav:clamavclamaveq0.12

CPE	Name	Operator	Version
clamav:clamav	clamav	le	0.95
clamav:clamav	clamav	eq	0.01
clamav:clamav	clamav	eq	0.02
clamav:clamav	clamav	eq	0.3
clamav:clamav	clamav	eq	0.03
clamav:clamav	clamav	eq	0.05
clamav:clamav	clamav	eq	0.8_
clamav:clamav	clamav	eq	0.9_rc1
clamav:clamav	clamav	eq	0.10
clamav:clamav	clamav	eq	0.12