Lucene search

K
ubuntuUbuntuUSN-684-1
HistoryDec 02, 2008 - 12:00 a.m.

ClamAV vulnerability

2008-12-0200:00:00
ubuntu.com
29

6.3 Medium

AI Score

Confidence

Low

0.162 Low

EPSS

Percentile

96.0%

Releases

  • Ubuntu 8.10

Packages

  • clamav -

Details

Ilja van Sprundel discovered that ClamAV did not handle recursive JPEG
information. If a remote attacker sent a specially crafted JPEG file,
ClamAV would crash, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibclamav5< 0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< 0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< daemon-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< dbg-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< freshclam-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchclamav< milter-0.94.dfsg.2-1ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibclamav-dev< 0.94.dfsg.2-1ubuntu0.1UNKNOWN

6.3 Medium

AI Score

Confidence

Low

0.162 Low

EPSS

Percentile

96.0%