CVE-2008-1389

Published: Sep 4, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

Affected (68)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Configuration A

68 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Up to 0.93.3
Clam Anti Virus Clamav	Version 0.11
Clam Anti Virus Clamav	Version 0.12
Clam Anti Virus Clamav	Version 0.13
Clam Anti Virus Clamav	Version 0.14
Clam Anti Virus Clamav	Version 0.14 pre
Clam Anti Virus Clamav	Version 0.15
Clam Anti Virus Clamav	Version 0.20
Clam Anti Virus Clamav	Version 0.21
Clam Anti Virus Clamav	Version 0.22
Clam Anti Virus Clamav	Version 0.23
Clam Anti Virus Clamav	Version 0.24
Clam Anti Virus Clamav	Version 0.51
Clam Anti Virus Clamav	Version 0.52
Clam Anti Virus Clamav	Version 0.53
Clam Anti Virus Clamav	Version 0.54
Clam Anti Virus Clamav	Version 0.60
Clam Anti Virus Clamav	Version 0.60p
Clam Anti Virus Clamav	Version 0.65
Clam Anti Virus Clamav	Version 0.67
Clam Anti Virus Clamav	Version 0.68.1
Clam Anti Virus Clamav	Version 0.68
Clam Anti Virus Clamav	Version 0.70
Clam Anti Virus Clamav	Version 0.71
Clam Anti Virus Clamav	Version 0.72
Clam Anti Virus Clamav	Version 0.73
Clam Anti Virus Clamav	Version 0.74
Clam Anti Virus Clamav	Version 0.75.1
Clam Anti Virus Clamav	Version 0.75
Clam Anti Virus Clamav	Version 0.80
Clam Anti Virus Clamav	Version 0.80 rc2
Clam Anti Virus Clamav	Version 0.80 rc3
Clam Anti Virus Clamav	Version 0.80 rc4
Clam Anti Virus Clamav	Version 0.80 rc
Clam Anti Virus Clamav	Version 0.81
Clam Anti Virus Clamav	Version 0.81 rc1
Clam Anti Virus Clamav	Version 0.82
Clam Anti Virus Clamav	Version 0.83
Clam Anti Virus Clamav	Version 0.84
Clam Anti Virus Clamav	Version 0.84 rc1
Clam Anti Virus Clamav	Version 0.84 rc2
Clam Anti Virus Clamav	Version 0.85.1
Clam Anti Virus Clamav	Version 0.85
Clam Anti Virus Clamav	Version 0.86.1
Clam Anti Virus Clamav	Version 0.86.2
Clam Anti Virus Clamav	Version 0.86
Clam Anti Virus Clamav	Version 0.86 rc1
Clam Anti Virus Clamav	Version 0.87.1
Clam Anti Virus Clamav	Version 0.87
Clam Anti Virus Clamav	Version 0.88.1
Clam Anti Virus Clamav	Version 0.88.2
Clam Anti Virus Clamav	Version 0.88.3
Clam Anti Virus Clamav	Version 0.88.4
Clam Anti Virus Clamav	Version 0.88.5
Clam Anti Virus Clamav	Version 0.88.6
Clam Anti Virus Clamav	Version 0.88.7
Clam Anti Virus Clamav	Version 0.88
Clam Anti Virus Clamav	Version 0.90.1
Clam Anti Virus Clamav	Version 0.90.2
Clam Anti Virus Clamav	Version 0.90.3
Clam Anti Virus Clamav	Version 0.90
Clam Anti Virus Clamav	Version 0.91.1
Clam Anti Virus Clamav	Version 0.91.2
Clam Anti Virus Clamav	Version 0.91
Clam Anti Virus Clamav	Version 0.92.1
Clam Anti Virus Clamav	Version 0.92
Clam Anti Virus Clamav	Version 0.93.1
Clam Anti Virus Clamav	Version 0.93

Related CWEs

References (48)

http://int21.de/cve/CVE-2008-1389-clamav-chd.html

Source: cve@mitre.org

http://kolab.org/security/kolab-vendor-notice-22.txt

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/31725

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/31906

Source: cve@mitre.org

http://secunia.com/advisories/31982

Source: cve@mitre.org

http://secunia.com/advisories/32030

Source: cve@mitre.org

http://secunia.com/advisories/32222

Source: cve@mitre.org

http://secunia.com/advisories/32699

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200809-18.xml

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661

Source: cve@mitre.org

Patch

http://support.apple.com/kb/HT3216

Source: cve@mitre.org

http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:189

Source: cve@mitre.org

http://www.securityfocus.com/bid/30994

Source: cve@mitre.org

http://www.securityfocus.com/bid/31681

Source: cve@mitre.org

http://www.securitytracker.com/id?1020805

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2484

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2564

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2780

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html

Source: cve@mitre.org

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089

Source: cve@mitre.org

http://int21.de/cve/CVE-2008-1389-clamav-chd.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://kolab.org/security/kolab-vendor-notice-22.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31725

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/31906

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31982

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32030

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32222

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32699

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200809-18.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=623661

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://support.apple.com/kb/HT3216

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:189

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/30994

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31681

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020805

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2484

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2564

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2780

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00332.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00348.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.