ClamAV vulnerability

2008-11-1700:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.054 Low

EPSS

Percentile

93.0%

JSON

Releases

Ubuntu 8.10

Packages

clamav -

Details

Moritz Jodeit discovered that ClamAV did not correctly handle certain
strings when examining a VBA project. If a remote attacker tricked ClamAV
into processing a malicious VBA file, ClamAV would crash, leading to a
denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibclamav5< 0.94.dfsg.1-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< 0.94.dfsg.1-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< daemon-0.94.dfsg.1-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< dbg-0.94.dfsg.1-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< freshclam-0.94.dfsg.1-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< milter-0.94.dfsg.1-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibclamav-dev< 0.94.dfsg.1-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	libclamav5	< 0.94.dfsg.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< 0.94.dfsg.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< daemon-0.94.dfsg.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< dbg-0.94.dfsg.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< freshclam-0.94.dfsg.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	clamav	< milter-0.94.dfsg.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libclamav-dev	< 0.94.dfsg.1-1ubuntu0.1	UNKNOWN