ClamAV kayıtları
clamav üreticisine ait 105 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 12
- Düzeltme kaydı olan
- %96,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation14
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer14
- CWE-125 Out-of-bounds Read11
- CWE-399 Resource Management Errors10
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9
- CWE-189 Numeric Errors6
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
105 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
48Planlayın | CVE-2023-20032İstismar yok | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file pclamav · clamav · CWE-120 | Kritik9,8 | — | %29,3 | 1 Mar 2023 |
47Planlayın | CVE-2012-1459İstismar yok | The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8ahnlab · v3 internet security · CWE-264 | Orta4,3 | — | %99,8 | 21 Mar 2012 |
47Planlayın | CVE-2012-1443İstismar yok | The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010cat · quick heal · CWE-264 | Orta4,3 | — | %99,6 | 21 Mar 2012 |
46Planlayın | CVE-2012-1457İstismar yok | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.anti-virus · vba32 · CWE-264 | Orta4,3 | — | %98,3 | 21 Mar 2012 |
46Planlayın | CVE-2024-20328İstismar yok | ClamAV VirusEvent File Processing Command Injection Vulnerabilityclamav · clamav · CWE-78 | Orta5,3 | — | %84,8 | 1 Mar 2024 |
43Planlayın | CVE-2017-12379İstismar yok | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a clamav · clamav · CWE-119 | Kritik9,8 | — | %12,5 | 26 Oca 2018 |
43Planlayın | CVE-2006-1615İstismar yok | Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute clamav · clamav · CWE-134 | Kritik10,0 | — | %11,6 | 6 Nis 2006 |
42Planlayın | CVE-2017-12377İstismar yok | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a clamav · clamav · CWE-125 | Kritik9,8 | — | %11,6 | 26 Oca 2018 |
42Planlayın | CVE-2009-1372İstismar yok | Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to causeclamav · clamav · CWE-119 | Kritik10,0 | — | %7,6 | 23 Nis 2009 |
41Planlayın | CVE-2010-0098İstismar yok | ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection viaclamav · clamav | Kritik10,0 | — | %4,9 | 8 Nis 2010 |
41Planlayın | CVE-2008-3914İstismar yok | Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "eclamav · clamav · CWE-200 | Kritik10,0 | — | %3,6 | 10 Eyl 2008 |
41Planlayın | CVE-2008-0728İstismar yok | The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corrupclamav · clamav · CWE-399 | Kritik10,0 | — | %2,8 | 12 Şub 2008 |
40Planlayın | CVE-2013-7088İstismar yok | ClamAV before 0.97.7 has buffer overflow in the libclamav componentclamav · clamav · CWE-120 | Kritik9,8 | — | %3,1 | 15 Kas 2019 |
40Planlayın | CVE-2013-7087İstismar yok | ClamAV before 0.97.7 has WWPack corrupt heap memoryclamav · clamav · CWE-119 | Kritik9,8 | — | %2,9 | 15 Kas 2019 |
40Planlayın | CVE-2007-6745İstismar yok | clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.clamav · clamav | Kritik9,8 | — | %2,2 | 7 Kas 2019 |
39İzleyin | CVE-2012-1458İstismar yok | The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafteclamav · clamav · CWE-264 | Orta4,3 | — | %73,7 | 21 Mar 2012 |
39İzleyin | CVE-2010-3434İstismar yok | Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial oclamav · clamav · CWE-119 | Kritik9,3 | — | %6,5 | 30 Eyl 2010 |
39İzleyin | CVE-2025-20260Kavram kanıtı | ClamAV PDF Scanning Buffer Overflow Vulnerabilityclamav · clamav · CWE-122 | Kritik9,8 | — | %1,6 | 18 Haz 2025 |
39İzleyin | CVE-2007-0899İstismar yok | There is a possible heap overflow in libclamav/fsg.c before 0.100.0.clamav · clamav · CWE-787 | Kritik9,8 | — | %1,5 | 6 Kas 2019 |
38İzleyin | CVE-2008-5525İstismar yok | ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML clamav · clamav · CWE-20 | Kritik9,3 | — | %2,9 | 12 Ara 2008 |
36İzleyin | CVE-2006-4018Kavram kanıtı | Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackeclamav · clamav · CWE-119 | Yüksek7,5 | — | %19,4 | 8 Ağu 2006 |
33İzleyin | CVE-2017-12376İstismar yok | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a clamav · clamav · CWE-119 | Yüksek7,8 | — | %6,6 | 26 Oca 2018 |
33İzleyin | CVE-2009-1270İstismar yok | libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that cauclamav · clamav · CWE-835 | Yüksek7,8 | — | %5,1 | 8 Nis 2009 |
32İzleyin | CVE-2022-20785İstismar yok | ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022clamav · clamav · CWE-401 | Yüksek7,5 | — | %7,1 | 4 May 2022 |
32İzleyin | CVE-2022-20770İstismar yok | ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022clamav · clamav · CWE-399 | Yüksek7,5 | — | %7,1 | 4 May 2022 |
- CVE-2023-2003248Planlayın
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file p
KritikCVSS 9,8İstismar yokEPSS %29clamav · clamav1 Mar 2023
- CVE-2012-145947Planlayın
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8
OrtaCVSS 4,3İstismar yokEPSS %100ahnlab · v3 internet security21 Mar 2012
- CVE-2012-144347Planlayın
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010
OrtaCVSS 4,3İstismar yokEPSS %100cat · quick heal21 Mar 2012
- CVE-2012-145746Planlayın
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.
OrtaCVSS 4,3İstismar yokEPSS %98anti-virus · vba3221 Mar 2012
- CVE-2024-2032846Planlayın
ClamAV VirusEvent File Processing Command Injection Vulnerability
OrtaCVSS 5,3İstismar yokEPSS %85clamav · clamav1 Mar 2024
- CVE-2017-1237943Planlayın
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a
KritikCVSS 9,8İstismar yokEPSS %13clamav · clamav26 Oca 2018
- CVE-2006-161543Planlayın
Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute
KritikCVSS 10,0İstismar yokEPSS %12clamav · clamav6 Nis 2006
- CVE-2017-1237742Planlayın
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a
KritikCVSS 9,8İstismar yokEPSS %12clamav · clamav26 Oca 2018
- CVE-2009-137242Planlayın
Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause
KritikCVSS 10,0İstismar yokEPSS %8clamav · clamav23 Nis 2009
- CVE-2010-009841Planlayın
ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via
KritikCVSS 10,0İstismar yokEPSS %5clamav · clamav8 Nis 2010
- CVE-2008-391441Planlayın
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "e
KritikCVSS 10,0İstismar yokEPSS %4clamav · clamav10 Eyl 2008
- CVE-2008-072841Planlayın
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corrup
KritikCVSS 10,0İstismar yokEPSS %3clamav · clamav12 Şub 2008
- CVE-2013-708840Planlayın
ClamAV before 0.97.7 has buffer overflow in the libclamav component
KritikCVSS 9,8İstismar yokEPSS %3clamav · clamav15 Kas 2019
- CVE-2013-708740Planlayın
ClamAV before 0.97.7 has WWPack corrupt heap memory
KritikCVSS 9,8İstismar yokEPSS %3clamav · clamav15 Kas 2019
- CVE-2007-674540Planlayın
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
KritikCVSS 9,8İstismar yokEPSS %2clamav · clamav7 Kas 2019
- CVE-2012-145839İzleyin
The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafte
OrtaCVSS 4,3İstismar yokEPSS %74clamav · clamav21 Mar 2012
- CVE-2010-343439İzleyin
Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial o
KritikCVSS 9,3İstismar yokEPSS %7clamav · clamav30 Eyl 2010
- CVE-2025-2026039İzleyin
ClamAV PDF Scanning Buffer Overflow Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %2clamav · clamav18 Haz 2025
- CVE-2007-089939İzleyin
There is a possible heap overflow in libclamav/fsg.c before 0.100.0.
KritikCVSS 9,8İstismar yokEPSS %2clamav · clamav6 Kas 2019
- CVE-2008-552538İzleyin
ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML
KritikCVSS 9,3İstismar yokEPSS %3clamav · clamav12 Ara 2008
- CVE-2006-401836İzleyin
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attacke
YüksekCVSS 7,5Kavram kanıtıEPSS %19clamav · clamav8 Ağu 2006
- CVE-2017-1237633İzleyin
ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a
YüksekCVSS 7,8İstismar yokEPSS %7clamav · clamav26 Oca 2018
- CVE-2009-127033İzleyin
libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that cau
YüksekCVSS 7,8İstismar yokEPSS %5clamav · clamav8 Nis 2009
- CVE-2022-2078532İzleyin
ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022
YüksekCVSS 7,5İstismar yokEPSS %7clamav · clamav4 May 2022
- CVE-2022-2077032İzleyin
ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022
YüksekCVSS 7,5İstismar yokEPSS %7clamav · clamav4 May 2022