CVE-2008-3215

Published: Jul 18, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.

Affected (19)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Version 0.88.2
Clam Anti Virus Clamav	Version 0.88.4
Clam Anti Virus Clamav	Version 0.88.5
Clam Anti Virus Clamav	Version 0.88.6
Clam Anti Virus Clamav	Version 0.88.7
Clam Anti Virus Clamav	Version 0.88.7 p0
Clam Anti Virus Clamav	Version 0.88.7 p1
Clam Anti Virus Clamav	Version 0.90.1
Clam Anti Virus Clamav	Version 0.90.1 p0
Clam Anti Virus Clamav	Version 0.90.2
Clam Anti Virus Clamav	Version 0.90.2 p0
Clam Anti Virus Clamav	Version 0.90.3
Clam Anti Virus Clamav	Version 0.90.3 p0
Clam Anti Virus Clamav	Version 0.90.3 p1
Clam Anti Virus Clamav	Version 0.90
Clam Anti Virus Clamav	Version 0.91.2 p0
Clam Anti Virus Clamav	Version 0.92.1
Clam Anti Virus Clamav	Version 0.92 p0
Clam Anti Virus Clamav	Version 0.93

Related CWEs

References (34)

http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html

Source: cve@mitre.org

http://lurker.clamav.net/message/20080707.155612.ad411b00.en.html

Source: cve@mitre.org

http://secunia.com/advisories/31091

Source: cve@mitre.org

http://secunia.com/advisories/31437

Source: cve@mitre.org

http://secunia.com/advisories/31882

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200808-07.xml

Source: cve@mitre.org

http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3920

Source: cve@mitre.org

Exploit

http://www.mandriva.com/security/advisories?name=MDVSA-2008:166

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/08/5

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/07/15/1

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-260A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/2584

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44200

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00606.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html

Source: cve@mitre.org

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000#c4

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lurker.clamav.net/message/20080707.155612.ad411b00.en.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31091

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31437

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31882

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200808-07.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.clamav.net/websvn/diff.php?repname=clamav-devel&path=/branches/0.93/libclamav/petite.c&rev=3920

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.mandriva.com/security/advisories?name=MDVSA-2008:166

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/07/08/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/07/15/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA08-260A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2008/2584

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/44200

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00606.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00617.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000#c4

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.