fkie_cve-2008-6845
Vulnerability from fkie_nvd
Published
2009-07-02 10:30
Modified
2025-04-09 00:30
Severity ?
Summary
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E71D5324-4A45-4428-A0AE-0270C9A9DBE5",
"versionEndIncluding": "0.93.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*",
"matchCriteriaId": "68EC0AEB-91CF-4A79-AF40-A475E896FB45",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*",
"matchCriteriaId": "5935EDE0-9203-4150-9B7A-AB10B377F9F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "59C2680C-C187-487A-B6C4-F509E0C52436",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*",
"matchCriteriaId": "A796E5E1-6481-49EF-8D97-9EC2A01C712B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*",
"matchCriteriaId": "03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*",
"matchCriteriaId": "22958219-46D6-4868-B324-BFC2F2C893F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*",
"matchCriteriaId": "4543DDEE-C1D1-428F-91C7-98B8985A5931",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*",
"matchCriteriaId": "1FED760C-7106-49CE-B4FE-CA53A1092C14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*",
"matchCriteriaId": "CABA4177-6B24-4364-BC34-D5ED171E60FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*",
"matchCriteriaId": "F488ACB2-A013-4BF3-B5AC-897E40BA87F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*",
"matchCriteriaId": "2D5799FA-DD99-4A35-BC56-B2FBEB747226",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*",
"matchCriteriaId": "F32EA99F-088E-499E-9DCE-EFA9A64D1673",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B04C5B-316D-4C6A-96CF-F145F7C9E636",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*",
"matchCriteriaId": "E66D5CDE-ED5D-41BA-A4B1-28E8559EC056",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*",
"matchCriteriaId": "20769174-C51F-47D5-A34F-EB772F542A57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*",
"matchCriteriaId": "721B8B46-DFD9-4937-96A3-8D731304415B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*",
"matchCriteriaId": "CDF18A59-FB30-45C6-B28E-4499DCD78F42",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*",
"matchCriteriaId": "0B28E0BE-1E2D-45D2-B483-2D81326BF482",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*",
"matchCriteriaId": "E7029650-6DF1-4616-BE9F-DE40E9BBE3A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*",
"matchCriteriaId": "F47FD5DF-F22E-4B78-9B92-A9C41950F836",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*",
"matchCriteriaId": "C1F9571F-9192-414F-B680-10A22C71CFDF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*",
"matchCriteriaId": "F7CAC876-9AAC-407C-A34E-98AA6801D25F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*",
"matchCriteriaId": "470FC8FE-785A-4934-8989-D17C1796870E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*",
"matchCriteriaId": "79A6C0FE-2EED-447D-9F62-12CFF1E0918A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*",
"matchCriteriaId": "0928E05F-92E7-4451-AC11-4E6A014E1154",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*",
"matchCriteriaId": "B2E7A70A-3584-4259-80CA-03AE290ABAE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*",
"matchCriteriaId": "24AF81C1-5B68-4D84-AFB9-C0419B7F98D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*",
"matchCriteriaId": "D27D70A0-EC82-4DC7-A66D-60D263B76E37",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*",
"matchCriteriaId": "28C9C5AD-97A9-42C8-917C-2787785F5BEA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*",
"matchCriteriaId": "F4AB3389-1C30-47BB-9DAE-0F744E7F8877",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*",
"matchCriteriaId": "CD4D3D3E-067B-4A37-A851-99D2A3E20FC1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*",
"matchCriteriaId": "4DA837A0-C8CB-486B-845E-A370E3137697",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*",
"matchCriteriaId": "235A144A-4AB1-4756-AFB1-58AFFE02649E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*",
"matchCriteriaId": "767BBE7F-6CC4-42D4-9730-6E617D36AAE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4EA7CD6A-133F-48E4-87BC-77CF21A25940",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*",
"matchCriteriaId": "F65A7930-A913-4C3D-95A3-E629D6A468C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*",
"matchCriteriaId": "9C24942D-7AD6-4391-8F05-2827AB6A751E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*",
"matchCriteriaId": "DA719FE4-04E0-4664-8EEC-70CD613408DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*",
"matchCriteriaId": "C859F864-B68F-4805-B804-E50F2C3FFE8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*",
"matchCriteriaId": "B5CAFEA5-C062-43EA-A302-38887DA6768C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*",
"matchCriteriaId": "525DC218-308C-4A0E-96A7-DC74B8973B62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*",
"matchCriteriaId": "72C71B82-8F84-4855-A138-7E7436788D69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*",
"matchCriteriaId": "039341D8-8E2B-4901-BFA6-9CCC46A18C75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*",
"matchCriteriaId": "C048A75E-6587-485C-9F2B-E12BED34FF2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*",
"matchCriteriaId": "5B003639-3228-4AC1-AB46-73481BB5DDA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*",
"matchCriteriaId": "6D6A495D-F9BB-41B9-A912-670D837EA278",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*",
"matchCriteriaId": "45F5E6B4-88DD-4426-9FB6-D9009F6B8740",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*",
"matchCriteriaId": "DB1EB857-D417-49EB-89FD-04733C872EE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4551D5ED-6C72-4C9B-A556-491042A6113A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*",
"matchCriteriaId": "01859947-09D4-417E-92A4-FA4F1625C60D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*",
"matchCriteriaId": "797B7A3B-BAEA-4868-BC3E-CE629FE151F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*",
"matchCriteriaId": "30337B76-E552-431F-B49C-A418E5B851A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*",
"matchCriteriaId": "53027413-3353-4051-88FA-A46859AD747A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*",
"matchCriteriaId": "970D5900-7F83-4140-A3E4-FF4E710DBD2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*",
"matchCriteriaId": "AA0D4F76-258B-4E5D-AA4D-8231E846C76F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*",
"matchCriteriaId": "F2A669CC-C10F-4E74-ACD0-DF933D723EB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*",
"matchCriteriaId": "CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*",
"matchCriteriaId": "13E8E7E7-E29A-4539-8D8C-45B9C39B0146",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*",
"matchCriteriaId": "A966F2C4-47A0-445F-8927-0F0222A48FB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*",
"matchCriteriaId": "7681419E-5125-40D6-BE61-57CE9C8F3DB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*",
"matchCriteriaId": "2CE0D056-B84F-4331-832C-5D1703A15A57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*",
"matchCriteriaId": "96A13543-D7E2-41D6-8E8E-BE150ECDAA75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*",
"matchCriteriaId": "27310591-C883-4929-824A-AE99E7592D3D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*",
"matchCriteriaId": "2964A047-0277-4DA4-BDBE-3F5FC3C1F68E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*",
"matchCriteriaId": "E891471A-A0B8-4251-A6D3-60E947A18F70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D0E6A5E0-66E0-4EA7-9007-2389179500C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*",
"matchCriteriaId": "ED827D10-C862-4BC7-AB33-06E040DAE161",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*",
"matchCriteriaId": "51DC9827-D7D1-4D34-AA35-6A7BDB92907D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*",
"matchCriteriaId": "37A3B776-0096-41B7-8D2E-C6F0B4F37458",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B5AAC04C-FFC7-45D8-A29C-6B258CD56489",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*",
"matchCriteriaId": "A06278C4-328D-4D14-9BC1-DCA697EC9EDD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*",
"matchCriteriaId": "9A66094D-050A-405E-AB0F-239A39F64E43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B931BDB2-DBE4-4983-ABFB-86941CDD14F2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file."
},
{
"lang": "es",
"value": "La caracter\u00edstica de descompresi\u00f3n en ClamAV v0.93.3 y anteriores permite a los atacantes remotos causar una denegaci\u00f3n de servicio (fallo de segmentaci\u00f3n) a trav\u00e9s de un archivo LZH corrupto."
}
],
"id": "CVE-2008-6845",
"lastModified": "2025-04-09T00:30:58.490",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2009-07-02T10:30:00.267",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/51963"
},
{
"source": "cve@mitre.org",
"url": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08011.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/archive/1/499078/100/0/threaded"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/32752"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/51963"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ivizsecurity.com/security-advisory-iviz-sr-08011.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/499078/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/32752"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…