CVEvulnerability

CVE-2008-1835

5.0 MEDIUM Published 2008-04-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-20

Description

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

Affected configurations

• clam anti-virus clamav (<= 0.92.1) • clam anti-virus clamav 0.15 • clam anti-virus clamav 0.20 • clam anti-virus clamav 0.21 • clam anti-virus clamav 0.22 • clam anti-virus clamav 0.23 • clam anti-virus clamav 0.24 • clam anti-virus clamav 0.51 • clam anti-virus clamav 0.52 • clam anti-virus clamav 0.53 • clam anti-virus clamav 0.54 • clam anti-virus clamav 0.60 • clam anti-virus clamav 0.60p • clam anti-virus clamav 0.65 • clam anti-virus clamav 0.67 • clam anti-virus clamav 0.68 • clam anti-virus clamav 0.68.1 • clam anti-virus clamav 0.70 • clam anti-virus clamav 0.71 • clam anti-virus clamav 0.72 • clam anti-virus clamav 0.73 • clam anti-virus clamav 0.74 • clam anti-virus clamav 0.75 • clam anti-virus clamav 0.75.1 • clam anti-virus clamav 0.80 • clam anti-virus clamav 0.80 rc1 • clam anti-virus clamav 0.80 rc2 • clam anti-virus clamav 0.80 rc3 • clam anti-virus clamav 0.80 rc4 • clam anti-virus clamav 0.81 • clam anti-virus clamav 0.81 rc1 • clam anti-virus clamav 0.82 • clam anti-virus clamav 0.83 • clam anti-virus clamav 0.84 • clam anti-virus clamav 0.84 rc1 • clam anti-virus clamav 0.84 rc2 • clam anti-virus clamav 0.85 • clam anti-virus clamav 0.85.1 • clam anti-virus clamav 0.86 • clam anti-virus clamav 0.86.1 • clam anti-virus clamav 0.86.2 • clam anti-virus clamav 0.86 rc1 • clam anti-virus clamav 0.87 • clam anti-virus clamav 0.87.1 • clam anti-virus clamav 0.88 • clam anti-virus clamav 0.88.1 • clam anti-virus clamav 0.88.3 • clam anti-virus clamav 0.88.4 • clam anti-virus clamav 0.88.5 • clam anti-virus clamav 0.88.6 • clam anti-virus clamav 0.88.7 • clam anti-virus clamav 0.90 • clam anti-virus clamav 0.90.1 • clam anti-virus clamav 0.90.2 • clam anti-virus clamav 0.90 rc1.1 • clam anti-virus clamav 0.90 rc2 • clam anti-virus clamav 0.90 rc3 • clam anti-virus clamav 0.90rc1 • clam anti-virus clamav 0.91 • clam anti-virus clamav 0.91.1 … and 4 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References