CVE Vulnerabilities

CVE-2008-3215

Published: Jul 18, 2008 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Affected Software

Name Vendor Start Version End Version
Clamav Clam_anti-virus 0.88.2 (including) 0.88.2 (including)
Clamav Clam_anti-virus 0.88.4 (including) 0.88.4 (including)
Clamav Clam_anti-virus 0.88.5 (including) 0.88.5 (including)
Clamav Clam_anti-virus 0.88.6 (including) 0.88.6 (including)
Clamav Clam_anti-virus 0.88.7 (including) 0.88.7 (including)
Clamav Clam_anti-virus 0.88.7-p0 (including) 0.88.7-p0 (including)
Clamav Clam_anti-virus 0.88.7-p1 (including) 0.88.7-p1 (including)
Clamav Clam_anti-virus 0.90 (including) 0.90 (including)
Clamav Clam_anti-virus 0.90.1 (including) 0.90.1 (including)
Clamav Clam_anti-virus 0.90.1-p0 (including) 0.90.1-p0 (including)
Clamav Clam_anti-virus 0.90.2 (including) 0.90.2 (including)
Clamav Clam_anti-virus 0.90.2-p0 (including) 0.90.2-p0 (including)
Clamav Clam_anti-virus 0.90.3 (including) 0.90.3 (including)
Clamav Clam_anti-virus 0.90.3-p0 (including) 0.90.3-p0 (including)
Clamav Clam_anti-virus 0.90.3-p1 (including) 0.90.3-p1 (including)
Clamav Clam_anti-virus 0.91.2-p0 (including) 0.91.2-p0 (including)
Clamav Clam_anti-virus 0.92-p0 (including) 0.92-p0 (including)
Clamav Clam_anti-virus 0.92.1 (including) 0.92.1 (including)
Clamav Clam_anti-virus 0.93 (including) 0.93 (including)
Clamav Ubuntu dapper *
Clamav Ubuntu feisty *
Clamav Ubuntu gutsy *
Clamav Ubuntu hardy *
Clamav Ubuntu upstream *

References