Lucene search
K

29 matches found

OSV
OSV
added 2026/02/06 1:10 a.m.4 views

CLEANSTART-2026-WX01708 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device

Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. See references for individual vulnerability details...

9.8CVSS8.6AI score0.21755EPSS
Exploits16References73
OSV
OSV
added 2026/02/06 1:6 a.m.2 views

CLEANSTART-2026-TC95380 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device

Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. See references for individual vulnerability details...

9.8CVSS8.4AI score0.21755EPSS
Exploits16References73
OSV
OSV
added 2026/01/30 2:17 p.m.2 views

CLEANSTART-2026-NJ87139 vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device

Multiple security vulnerabilities affect the clamav package. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. See references for individual vulnerability details...

9.8CVSS7.3AI score0.21755EPSS
Exploits16References73
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-2642

Malware in sbrugna...

4.3CVSS6AI score0.0499EPSS
Exploits0References21
SUSE Linux
SUSE Linux
added 2025/02/03 9:39 a.m.1 views

Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. Start clamonacc with --fdpass to avoid errors due to clamd not being able to acce...

8.7CVSS7.8AI score0.01988EPSS
Exploits0References30
SUSE Linux
SUSE Linux
added 2025/02/03 9:39 a.m.1 views

Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. Start clamonacc with --fdpass to avoid errors due to clamd not being able to acce...

8.7CVSS8.1AI score0.01988EPSS
Exploits0References30
FreeBSD
FreeBSD
added 2025/01/22 12:0 a.m.10 views

clamav -- Possbile denial-of-service vulnerability

The ClamAV project reports: A possible buffer overflow read bug is found in the OLE2 file parser that could cause a denial-of-service DoS condition...

7.5CVSS5.6AI score0.01988EPSS
Exploits0References1
OSV
OSV
added 2024/02/07 5:15 p.m.0 views

UBUNTU-CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.08586EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/21 2:0 a.m.1 views

SUSE CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

8.6CVSS6.8AI score0.01633EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.1 views

SUSE CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

4.3CVSS6.8AI score0.0499EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/05/04 4:8 p.m.1 views

CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

8.6CVSS6.4AI score0.01633EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/04 12:0 a.m.1 views

PT-2022-2862 · Unknown +1 · Clam Antivirus +1

Name of the Vulnerable Software and Affected Versions: Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 Description: The issue is related to the OLE2 file parser in Clam AntiVirus, which is vulnerable due to incorrect use of the realloc function, potentially resulting in a double-free. This...

10CVSS7.2AI score0.01633EPSS
Exploits0References13
Microsoft CVE
Microsoft CVE
added 2020/10/25 7:0 a.m.2 views

The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop as demonstrated via a crafted DOC file.

...

4.3CVSS7AI score0.0499EPSS
Exploits0
Kaspersky
Kaspersky
added 2014/07/22 12:0 a.m.97 views

KLA10119 Multiple vulnerabilities in Mozilla

An unspecified vulnerability was found in Clam Anti-virus. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the OLE2 parser via a specially designed file. Below is a complete list of vulnerabilities 1...

7.8AI score
Exploits0References5
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.23 views

Mandriva Update for clamav MDKSA-2007:115 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:115 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

5CVSS6.4AI score0.0499EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2007/06/27 12:0 a.m.25 views

Debian DSA-1320-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2650 It was discovered that the OLE2 parser can be tricked into an infinite loop and memory exhaustion. - CVE-2007-30...

10CVSS6AI score0.0499EPSS
Exploits0References13
OSV
OSV
added 2007/06/23 12:0 a.m.24 views

DSA-1320-1 clamav

Bulletin has no description...

10CVSS5.9AI score0.0499EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/06/21 12:0 a.m.28 views

FreeBSD : clamav -- multiple vulnerabilities (903654bd-1927-11dc-b8a0-02e0185f8d72)

Clamav had been found vulnerable to multiple vulnerabilities : - Improper checking for the end of an buffer causing an unspecified attack vector. - Insecure temporary file handling, which could be exploited to read sensitive information. - A flaw in the parser engine which could allow a remote...

10CVSS5.7AI score0.0499EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2007/06/05 12:0 a.m.22 views

Mandrake Linux Security Advisory : clamav (MDKSA-2007:115)

A vulnerability in the OLE2 parser in ClamAV was found that could allow a remote attacker to cause a denial of service via resource consumption with a carefully crafted OLE2 file. Other vulnerabilities and bugs have also been corrected in 0.90.3 which is being provided with this update...

10CVSS5.6AI score0.0499EPSS
Exploits0References6
securityvulns
securityvulns
added 2007/06/05 12:0 a.m.70 views

[ MDKSA-2007:115 ] - Updated clamav packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:115 http://www.mandriva.com/security/ Package : clamav Date : June 4, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability in the OLE2 parser in ClamAV was found...

5CVSS6.6AI score0.0499EPSS
Exploits0
Rows per page
Query Builder