Vulnerability in Clamav
CVE-2010-0098
ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities.
EPSS: 0.049 (91.2th percentile) — read the EPSS interpretation.
Affected products
- Clamav — versions 0.80, 0.91.1, 0.53
- Clamavs Clamav — versions 0.06, 0.04
- N/a — versions n/a
References
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vendor-advisory, x_refsource_APPLE)
- cret@cert.org (vendor-advisory, x_refsource_SUSE)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vendor-advisory, x_refsource_MANDRIVA)
- cret@cert.org (mailing-list, x_refsource_MLIST)
- cret@cert.org (mailing-list, x_refsource_MLIST)