Vulnerability in Clamav

CVE-2008-6845

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file.

EPSS: 0.022 (80.8th percentile) — read the EPSS interpretation.

Affected products

  • Clamav — versions 0.01, 0.02, 0.3
  • N/a — versions n/a

References