The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to recursion level and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clamav | Clamav | * | 0.97.2 (including) |
| Clamav | Clamav | 0.9-rc1 (including) | 0.9-rc1 (including) |
| Clamav | Clamav | 0.90 (including) | 0.90 (including) |
| Clamav | Clamav | 0.90-rc1 (including) | 0.90-rc1 (including) |
| Clamav | Clamav | 0.90-rc1.1 (including) | 0.90-rc1.1 (including) |
| Clamav | Clamav | 0.90-rc2 (including) | 0.90-rc2 (including) |
| Clamav | Clamav | 0.90-rc3 (including) | 0.90-rc3 (including) |
| Clamav | Clamav | 0.90.1 (including) | 0.90.1 (including) |
| Clamav | Clamav | 0.90.2 (including) | 0.90.2 (including) |
| Clamav | Clamav | 0.90.3 (including) | 0.90.3 (including) |
| Clamav | Clamav | 0.91 (including) | 0.91 (including) |
| Clamav | Clamav | 0.91-rc1 (including) | 0.91-rc1 (including) |
| Clamav | Clamav | 0.91-rc2 (including) | 0.91-rc2 (including) |
| Clamav | Clamav | 0.91.1 (including) | 0.91.1 (including) |
| Clamav | Clamav | 0.91.2 (including) | 0.91.2 (including) |
| Clamav | Clamav | 0.92 (including) | 0.92 (including) |
| Clamav | Clamav | 0.92.1 (including) | 0.92.1 (including) |
| Clamav | Clamav | 0.93 (including) | 0.93 (including) |
| Clamav | Clamav | 0.93.1 (including) | 0.93.1 (including) |
| Clamav | Clamav | 0.93.2 (including) | 0.93.2 (including) |
| Clamav | Clamav | 0.93.3 (including) | 0.93.3 (including) |
| Clamav | Clamav | 0.94 (including) | 0.94 (including) |
| Clamav | Clamav | 0.94.1 (including) | 0.94.1 (including) |
| Clamav | Clamav | 0.94.2 (including) | 0.94.2 (including) |
| Clamav | Clamav | 0.95 (including) | 0.95 (including) |
| Clamav | Clamav | 0.95-rc1 (including) | 0.95-rc1 (including) |
| Clamav | Clamav | 0.95-rc2 (including) | 0.95-rc2 (including) |
| Clamav | Clamav | 0.95-src1 (including) | 0.95-src1 (including) |
| Clamav | Clamav | 0.95-src2 (including) | 0.95-src2 (including) |
| Clamav | Clamav | 0.95.1 (including) | 0.95.1 (including) |
| Clamav | Clamav | 0.95.2 (including) | 0.95.2 (including) |
| Clamav | Clamav | 0.95.3 (including) | 0.95.3 (including) |
| Clamav | Clamav | 0.96 (including) | 0.96 (including) |
| Clamav | Clamav | 0.96-rc1 (including) | 0.96-rc1 (including) |
| Clamav | Clamav | 0.96-rc2 (including) | 0.96-rc2 (including) |
| Clamav | Clamav | 0.96.1 (including) | 0.96.1 (including) |
| Clamav | Clamav | 0.96.2 (including) | 0.96.2 (including) |
| Clamav | Clamav | 0.96.3 (including) | 0.96.3 (including) |
| Clamav | Clamav | 0.96.4 (including) | 0.96.4 (including) |
| Clamav | Clamav | 0.96.5 (including) | 0.96.5 (including) |
| Clamav | Clamav | 0.97 (including) | 0.97 (including) |
| Clamav | Clamav | 0.97-rc (including) | 0.97-rc (including) |
| Clamav | Clamav | 0.97.1 (including) | 0.97.1 (including) |
| Clamav | Ubuntu | devel | * |
| Clamav | Ubuntu | lucid | * |
| Clamav | Ubuntu | maverick | * |
| Clamav | Ubuntu | natty | * |
| Clamav | Ubuntu | oneiric | * |
| Clamav | Ubuntu | upstream | * |