Clamav: >> Clamav >> 0.90.2_p0 Security Vulnerabilities
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
CVSS Score
10.0
EPSS Score
0.02
Published
2008-09-11
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
CVSS Score
10.0
EPSS Score
0.016
Published
2008-02-12
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
CVSS Score
4.3
EPSS Score
0.038
Published
2007-05-14
Page 7