Information disclosure in Clamav

CVE-2008-3914

Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.

Vulnerability class: Information Disclosure

EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_MISC, Issue Tracking)
  • cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List)
  • cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
  • cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)