Skip to content
Noroxi

ClamAV records

105 published records for vendor clamav.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
12
With a fix record
96.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

105 records
  • CVE-2023-20032
    48Plan

    On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file p

    CriticalCVSS 9.8No exploitEPSS 30%

    clamav · clamavMar 1, 2023

  • CVE-2012-1459
    47Plan

    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8

    MediumCVSS 4.3No exploitEPSS 99%

    ahnlab · v3 internet securityMar 21, 2012

  • CVE-2012-1443
    47Plan

    The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010

    MediumCVSS 4.3No exploitEPSS 99%

    cat · quick healMar 21, 2012

  • CVE-2012-1457
    47Plan

    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.

    MediumCVSS 4.3No exploitEPSS 99%

    anti-virus · vba32Mar 21, 2012

  • CVE-2024-20328
    46Plan

    ClamAV VirusEvent File Processing Command Injection Vulnerability

    MediumCVSS 5.3No exploitEPSS 84%

    clamav · clamavMar 1, 2024

  • CVE-2017-12379
    43Plan

    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a

    CriticalCVSS 9.8No exploitEPSS 12%

    clamav · clamavJan 26, 2018

  • CVE-2006-1615
    43Plan

    Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute

    CriticalCVSS 10.0No exploitEPSS 11%

    clamav · clamavApr 6, 2006

  • CVE-2017-12377
    42Plan

    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a

    CriticalCVSS 9.8No exploitEPSS 11%

    clamav · clamavJan 26, 2018

  • CVE-2009-1372
    42Plan

    Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause

    CriticalCVSS 10.0No exploitEPSS 7%

    clamav · clamavApr 23, 2009

  • CVE-2010-0098
    41Plan

    ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via

    CriticalCVSS 10.0No exploitEPSS 4%

    clamav · clamavApr 8, 2010

  • CVE-2008-3914
    41Plan

    Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "e

    CriticalCVSS 10.0No exploitEPSS 3%

    clamav · clamavSep 10, 2008

  • CVE-2008-0728
    41Plan

    The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corrup

    CriticalCVSS 10.0No exploitEPSS 2%

    clamav · clamavFeb 12, 2008

  • CVE-2013-7088
    40Plan

    ClamAV before 0.97.7 has buffer overflow in the libclamav component

    CriticalCVSS 9.8No exploitEPSS 3%

    clamav · clamavNov 15, 2019

  • CVE-2013-7087
    40Plan

    ClamAV before 0.97.7 has WWPack corrupt heap memory

    CriticalCVSS 9.8No exploitEPSS 2%

    clamav · clamavNov 15, 2019

  • CVE-2007-6745
    40Plan

    clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.

    CriticalCVSS 9.8No exploitEPSS 2%

    clamav · clamavNov 7, 2019

  • CVE-2012-1458
    39Monitor

    The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafte

    MediumCVSS 4.3No exploitEPSS 72%

    clamav · clamavMar 21, 2012

  • CVE-2010-3434
    39Monitor

    Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial o

    CriticalCVSS 9.3No exploitEPSS 6%

    clamav · clamavSep 30, 2010

  • CVE-2025-20260
    39Monitor

    ClamAV PDF Scanning Buffer Overflow Vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    clamav · clamavJun 18, 2025

  • CVE-2007-0899
    39Monitor

    There is a possible heap overflow in libclamav/fsg.c before 0.100.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    clamav · clamavNov 6, 2019

  • CVE-2008-5525
    38Monitor

    ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML

    CriticalCVSS 9.3No exploitEPSS 2%

    clamav · clamavDec 12, 2008

  • CVE-2006-4018
    36Monitor

    Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attacke

    HighCVSS 7.5Proof of conceptEPSS 19%

    clamav · clamavAug 8, 2006

  • CVE-2017-12376
    33Monitor

    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a

    HighCVSS 7.8No exploitEPSS 6%

    clamav · clamavJan 26, 2018

  • CVE-2009-1270
    33Monitor

    libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that cau

    HighCVSS 7.8No exploitEPSS 5%

    clamav · clamavApr 8, 2009

  • CVE-2022-20785
    32Monitor

    ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022

    HighCVSS 7.5No exploitEPSS 7%

    clamav · clamavMay 4, 2022

  • CVE-2022-20770
    32Monitor

    ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022

    HighCVSS 7.5No exploitEPSS 7%

    clamav · clamavMay 4, 2022