CVEvulnerability

CVE-2008-5050

9.3 HIGH Published 2008-11-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-11-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.

Affected configurations

• clam anti-virus clamav (<= 0.94) • clam anti-virus clamav 0.01 • clam anti-virus clamav 0.02 • clam anti-virus clamav 0.03 • clam anti-virus clamav 0.04 • clam anti-virus clamav 0.05 • clam anti-virus clamav 0.06 • clam anti-virus clamav 0.10 • clam anti-virus clamav 0.11 • clam anti-virus clamav 0.12 • clam anti-virus clamav 0.13 • clam anti-virus clamav 0.14 • clam anti-virus clamav 0.15 • clam anti-virus clamav 0.20 • clam anti-virus clamav 0.21 • clam anti-virus clamav 0.22 • clam anti-virus clamav 0.23 • clam anti-virus clamav 0.24 • clam anti-virus clamav 0.51 • clam anti-virus clamav 0.52 • clam anti-virus clamav 0.53 • clam anti-virus clamav 0.54 • clam anti-virus clamav 0.60 • clam anti-virus clamav 0.60p • clam anti-virus clamav 0.65 • clam anti-virus clamav 0.67 • clam anti-virus clamav 0.68 • clam anti-virus clamav 0.68.1 • clam anti-virus clamav 0.70 • clam anti-virus clamav 0.71 • clam anti-virus clamav 0.72 • clam anti-virus clamav 0.73 • clam anti-virus clamav 0.74 • clam anti-virus clamav 0.75 • clam anti-virus clamav 0.75.1 • clam anti-virus clamav 0.80 • clam anti-virus clamav 0.80 rc1 • clam anti-virus clamav 0.80 rc2 • clam anti-virus clamav 0.80 rc3 • clam anti-virus clamav 0.80 rc4 • clam anti-virus clamav 0.81 • clam anti-virus clamav 0.81 rc1 • clam anti-virus clamav 0.82 • clam anti-virus clamav 0.83 • clam anti-virus clamav 0.84 • clam anti-virus clamav 0.84 rc1 • clam anti-virus clamav 0.84 rc2 • clam anti-virus clamav 0.85 • clam anti-virus clamav 0.85.1 • clam anti-virus clamav 0.86 • clam anti-virus clamav 0.86.1 • clam anti-virus clamav 0.86.2 • clam anti-virus clamav 0.86 rc1 • clam anti-virus clamav 0.87 • clam anti-virus clamav 0.87.1 • clam anti-virus clamav 0.88 • clam anti-virus clamav 0.88.1 • clam anti-virus clamav 0.88.2 • clam anti-virus clamav 0.88.3 • clam anti-virus clamav 0.88.4 … and 22 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References