ClamAV vulnerability

2008-12-0200:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.151 Low

EPSS

Percentile

95.9%

JSON

Releases

Ubuntu 8.10

Packages

clamav -

Details

Ilja van Sprundel discovered that ClamAV did not handle recursive JPEG
information. If a remote attacker sent a specially crafted JPEG file,
ClamAV would crash, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibclamav5< 0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< 0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< daemon-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< dbg-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< freshclam-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< milter-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibclamav-dev< 0.94.dfsg.2-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	libclamav5	< 0.94.dfsg.2-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< 0.94.dfsg.2-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< daemon-0.94.dfsg.2-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< dbg-0.94.dfsg.2-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< freshclam-0.94.dfsg.2-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< milter-0.94.dfsg.2-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libclamav-dev	< 0.94.dfsg.2-1ubuntu0.1	UNKNOWN