Vulnerability in Clam_anti-virus Clamav
CVE-2008-1837
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.
EPSS: 0.048 (90.9th percentile) — read the EPSS interpretation.
Affected products
- Clam_anti-virus Clamav — versions 0.15, 0.20, 0.21
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
- secalert@redhat.com (vendor-advisory, x_refsource_APPLE)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2008-1837?
- CVE-2008-1837 is a vulnerability in Clam_anti-virus Clamav, classified under CWE-399. Published 2008-04-16.
- Is CVE-2008-1837 known to be exploited?
- 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.