CVE-2008-5314

Published: Dec 3, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.

Affected (49)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Configuration A

49 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Up to 0.94.1
Clam Anti Virus Clamav	Version 0.70
Clam Anti Virus Clamav	Version 0.71
Clam Anti Virus Clamav	Version 0.72
Clam Anti Virus Clamav	Version 0.73
Clam Anti Virus Clamav	Version 0.74
Clam Anti Virus Clamav	Version 0.75.1
Clam Anti Virus Clamav	Version 0.75
Clam Anti Virus Clamav	Version 0.80
Clam Anti Virus Clamav	Version 0.80 rc2
Clam Anti Virus Clamav	Version 0.80 rc3
Clam Anti Virus Clamav	Version 0.80 rc4
Clam Anti Virus Clamav	Version 0.80 rc
Clam Anti Virus Clamav	Version 0.81
Clam Anti Virus Clamav	Version 0.81 rc1
Clam Anti Virus Clamav	Version 0.82
Clam Anti Virus Clamav	Version 0.83
Clam Anti Virus Clamav	Version 0.84
Clam Anti Virus Clamav	Version 0.84 rc1
Clam Anti Virus Clamav	Version 0.84 rc2
Clam Anti Virus Clamav	Version 0.85.1
Clam Anti Virus Clamav	Version 0.85
Clam Anti Virus Clamav	Version 0.86.1
Clam Anti Virus Clamav	Version 0.86.2
Clam Anti Virus Clamav	Version 0.86
Clam Anti Virus Clamav	Version 0.86 rc1
Clam Anti Virus Clamav	Version 0.87.1
Clam Anti Virus Clamav	Version 0.87
Clam Anti Virus Clamav	Version 0.88.1
Clam Anti Virus Clamav	Version 0.88.2
Clam Anti Virus Clamav	Version 0.88.3
Clam Anti Virus Clamav	Version 0.88.4
Clam Anti Virus Clamav	Version 0.88.5
Clam Anti Virus Clamav	Version 0.88.6
Clam Anti Virus Clamav	Version 0.88.7
Clam Anti Virus Clamav	Version 0.88
Clam Anti Virus Clamav	Version 0.90.1
Clam Anti Virus Clamav	Version 0.90.2
Clam Anti Virus Clamav	Version 0.90.3
Clam Anti Virus Clamav	Version 0.90
Clam Anti Virus Clamav	Version 0.91.1
Clam Anti Virus Clamav	Version 0.91.2
Clam Anti Virus Clamav	Version 0.91
Clam Anti Virus Clamav	Version 0.92.1
Clam Anti Virus Clamav	Version 0.92
Clam Anti Virus Clamav	Version 0.93.1
Clam Anti Virus Clamav	Version 0.93.3
Clam Anti Virus Clamav	Version 0.93
Clam Anti Virus Clamav	Version 0.94

Related CWEs

References (48)

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html

Source: cve@mitre.org

http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html

Source: cve@mitre.org

http://osvdb.org/50363

Source: cve@mitre.org

http://secunia.com/advisories/32926

Source: cve@mitre.org

http://secunia.com/advisories/32936

Source: cve@mitre.org

http://secunia.com/advisories/33016

Source: cve@mitre.org

http://secunia.com/advisories/33195

Source: cve@mitre.org

http://secunia.com/advisories/33317

Source: cve@mitre.org

http://secunia.com/advisories/33937

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200812-21.xml

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=643134

Source: cve@mitre.org

http://support.apple.com/kb/HT3438

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1680

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:239

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/12/01/8

Source: cve@mitre.org

http://www.securityfocus.com/bid/32555

Source: cve@mitre.org

http://www.securitytracker.com/id?1021296

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-684-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3311

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0422

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46985

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7330

Source: cve@mitre.org

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266

Source: cve@mitre.org

Exploit

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50363

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32926

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32936

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33016

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33195

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33317

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33937

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200812-21.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=643134

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3438

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1680

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:239

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/12/01/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32555

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021296

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-684-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3311

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0422

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46985

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7330

Source: af854a3a-2127-422b-91ae-364da2661108

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.