CVE-2008-2713

Published: Jun 16, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.

Affected (57)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Clamav

Configuration A

57 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Version 0.15
Clam Anti Virus Clamav	Version 0.20
Clam Anti Virus Clamav	Version 0.21
Clam Anti Virus Clamav	Version 0.22
Clam Anti Virus Clamav	Version 0.23
Clam Anti Virus Clamav	Version 0.24
Clam Anti Virus Clamav	Version 0.51
Clam Anti Virus Clamav	Version 0.52
Clam Anti Virus Clamav	Version 0.53
Clam Anti Virus Clamav	Version 0.54
Clam Anti Virus Clamav	Version 0.60
Clam Anti Virus Clamav	Version 0.60p
Clam Anti Virus Clamav	Version 0.65
Clam Anti Virus Clamav	Version 0.67
Clam Anti Virus Clamav	Version 0.68.1
Clam Anti Virus Clamav	Version 0.68
Clam Anti Virus Clamav	Version 0.70
Clam Anti Virus Clamav	Version 0.71
Clam Anti Virus Clamav	Version 0.72
Clam Anti Virus Clamav	Version 0.73
Clam Anti Virus Clamav	Version 0.74
Clam Anti Virus Clamav	Version 0.75.1
Clam Anti Virus Clamav	Version 0.75
Clam Anti Virus Clamav	Version 0.80
Clam Anti Virus Clamav	Version 0.80_rc1
Clam Anti Virus Clamav	Version 0.80_rc2
Clam Anti Virus Clamav	Version 0.80_rc3
Clam Anti Virus Clamav	Version 0.80_rc4
Clam Anti Virus Clamav	Version 0.81
Clam Anti Virus Clamav	Version 0.81_rc1
Clam Anti Virus Clamav	Version 0.82
Clam Anti Virus Clamav	Version 0.83
Clam Anti Virus Clamav	Version 0.84
Clam Anti Virus Clamav	Version 0.84_rc1
Clam Anti Virus Clamav	Version 0.84_rc2
Clam Anti Virus Clamav	Version 0.85.1
Clam Anti Virus Clamav	Version 0.85
Clam Anti Virus Clamav	Version 0.86.1
Clam Anti Virus Clamav	Version 0.86.2
Clam Anti Virus Clamav	Version 0.86
Clam Anti Virus Clamav	Version 0.86_rc1
Clam Anti Virus Clamav	Version 0.87.1
Clam Anti Virus Clamav	Version 0.87
Clam Anti Virus Clamav	Version 0.88.1
Clam Anti Virus Clamav	Version 0.88.3
Clam Anti Virus Clamav	Version 0.88.4
Clam Anti Virus Clamav	Version 0.88.5
Clam Anti Virus Clamav	Version 0.88.6
Clam Anti Virus Clamav	Version 0.88.7
Clam Anti Virus Clamav	Version 0.88
Clam Anti Virus Clamav	Version 0.90.1
Clam Anti Virus Clamav	Version 0.90.2
Clam Anti Virus Clamav	Version 0.90
Clam Anti Virus Clamav	Version 0.90_rc1.1
Clam Anti Virus Clamav	Version 0.90_rc2
Clam Anti Virus Clamav	Version 0.90_rc3
Clam Anti Virus Clamav	Version 0.90rc1

Related CWEs

CWE-399

References (62)

http://kolab.org/security/kolab-vendor-notice-21.txt

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/30657

Source: cve@mitre.org

http://secunia.com/advisories/30785

Source: cve@mitre.org

http://secunia.com/advisories/30829

Source: cve@mitre.org

http://secunia.com/advisories/30967

Source: cve@mitre.org

http://secunia.com/advisories/31091

Source: cve@mitre.org

http://secunia.com/advisories/31167

Source: cve@mitre.org

http://secunia.com/advisories/31206

Source: cve@mitre.org

http://secunia.com/advisories/31437

Source: cve@mitre.org

http://secunia.com/advisories/31576

Source: cve@mitre.org

http://secunia.com/advisories/31882

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200808-07.xml

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=605577&group_id=86638

Source: cve@mitre.org

http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3886

Source: cve@mitre.org

Exploit

http://up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1616

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:122

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/06/15/2

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/06/17/8

Source: cve@mitre.org

http://www.securityfocus.com/bid/29750

Source: cve@mitre.org

http://www.securitytracker.com/id?1020305

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-260A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/1855/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2584

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43133

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00763.html

Source: cve@mitre.org

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000

Source: cve@mitre.org

http://kolab.org/security/kolab-vendor-notice-21.txt