CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3501

The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cause a denial of service (daemon crash) via a URL with certain characters, as demonstrated using %0D or %0A.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.023

EPSS Ranking 84.0%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2012-3501

Darold » Squidclamav » Version: 5.0

cpe:2.3:a:darold:squidclamav:5.0
Darold » Squidclamav » Version: 5.1

cpe:2.3:a:darold:squidclamav:5.1
Darold » Squidclamav » Version: 5.2

cpe:2.3:a:darold:squidclamav:5.2
Darold » Squidclamav » Version: 5.3

cpe:2.3:a:darold:squidclamav:5.3
Darold » Squidclamav » Version: 5.4

cpe:2.3:a:darold:squidclamav:5.4
Darold » Squidclamav » Version: 5.5

cpe:2.3:a:darold:squidclamav:5.5
Darold » Squidclamav » Version: 5.6

cpe:2.3:a:darold:squidclamav:5.6
Darold » Squidclamav » Version: 5.7

cpe:2.3:a:darold:squidclamav:5.7
Darold » Squidclamav » Version: 6.0

cpe:2.3:a:darold:squidclamav:6.0
Darold » Squidclamav » Version: 6.1

cpe:2.3:a:darold:squidclamav:6.1
Darold » Squidclamav » Version: 6.2

cpe:2.3:a:darold:squidclamav:6.2
Darold » Squidclamav » Version: 6.3

cpe:2.3:a:darold:squidclamav:6.3
Darold » Squidclamav » Version: 6.4

cpe:2.3:a:darold:squidclamav:6.4
Darold » Squidclamav » Version: 6.5

cpe:2.3:a:darold:squidclamav:6.5
Darold » Squidclamav » Version: 6.6

cpe:2.3:a:darold:squidclamav:6.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3501

Products

Pricing

Contact Us