Improper input validation in Clam_anti-virus Clamav

CVE-2008-1835

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References