CVEvulnerability

CVE-2009-1371

5.0 MEDIUM Published 2009-04-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding.

Affected configurations

• clamav clamav (<= 0.95) • clamav clamav 0.01 • clamav clamav 0.02 • clamav clamav 0.3 • clamav clamav 0.03 • clamav clamav 0.05 • clamav clamav 0.8 • clamav clamav 0.9 rc1 • clamav clamav 0.10 • clamav clamav 0.12 • clamav clamav 0.13 • clamav clamav 0.14 • clamav clamav 0.15 • clamav clamav 0.20 • clamav clamav 0.21 • clamav clamav 0.22 • clamav clamav 0.23 • clamav clamav 0.24 • clamav clamav 0.51 • clamav clamav 0.52 • clamav clamav 0.53 • clamav clamav 0.54 • clamav clamav 0.60 • clamav clamav 0.60p • clamav clamav 0.65 • clamav clamav 0.66 • clamav clamav 0.67 • clamav clamav 0.67-1 • clamav clamav 0.68 • clamav clamav 0.68.1 • clamav clamav 0.70 • clamav clamav 0.71 • clamav clamav 0.72 • clamav clamav 0.73 • clamav clamav 0.74 • clamav clamav 0.75 • clamav clamav 0.75.1 • clamav clamav 0.80 • clamav clamav 0.80 rc • clamav clamav 0.80 rc1 • clamav clamav 0.80 rc2 • clamav clamav 0.80 rc3 • clamav clamav 0.81 • clamav clamav 0.81 rc1 • clamav clamav 0.82 • clamav clamav 0.83 • clamav clamav 0.84 • clamav clamav 0.84 rc1 • clamav clamav 0.84 rc2 • clamav clamav 0.85 • clamav clamav 0.85.1 • clamav clamav 0.86 • clamav clamav 0.86.1 • clamav clamav 0.86.2 • clamav clamav 0.86 rc1 • clamav clamav 0.87 • clamav clamav 0.87.1 • clamav clamav 0.88 • clamav clamav 0.88.1 • clamav clamav 0.88.2 … and 36 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References