CVE-2008-0728: Critical severity clamav vulnerability
Published Feb 12, 2008
·Updated
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
Affected Software
90 affected components
clamav clamav=0.86.2
clamav clamav=0.88.5
clamav clamav=0.02
clamav clamav=0.8-rc3
clamav clamav=0.15
clamav clamav=0.90-rc2
clamav clamav=0.75.1
clamav clamav=0.65
clamav clamav=0.88.7
clamav clamav=0.81
clamav clamav=0.86
clamav clamav=0.01
clamav clamav=0.92_p0
clamav clamav=0.85
clamav clamav=0.84
clamav clamav=0.3
clamav clamav=0.91.2_p0
clamav clamav=0.90-rc1.1
clamav clamav=0.90
clamav clamav=0.70-rc
clamav clamav=0.86-rc1
clamav clamav=0.68.1
clamav clamav=0.03
clamav clamav=0.87.1
clamav clamav=0.9-rc1
clamav clamav=0.74
clamav clamav=0.88
clamav clamav=0.91-rc1
clamav clamav=0.86.1
clamav clamav=0.71
clamav clamav=0.88.1
clamav clamav=0.60p
clamav clamav=0.80-rc
clamav clamav=0.91.2
clamav clamav=0.90.3
clamav clamav<=0.92
clamav clamav=0.85.1
clamav clamav=0.90-rc1
clamav clamav=0.13
clamav clamav=0.81-rc1
clamav clamav=0.10
clamav clamav=0.80-rc3
clamav clamav=0.90.1_p0
clamav clamav=0.12
clamav clamav=0.88.7_p0
clamav clamav=0.23
clamav clamav=0.84-rc1
clamav clamav=0.90.3_p1
clamav clamav=0.80-rc2
clamav clamav=0.80-rc1
clamav clamav=0.60
clamav clamav=0.88.2
clamav clamav=0.83
clamav clamav=0.20
clamav clamav=0.80-rc4
clamav clamav=0.90-rc3
clamav clamav=0.70
clamav clamav=0.88.4
clamav clamav=0.90.3_p0
clamav clamav=0.14
clamav clamav=0.24
clamav clamav=0.90.2_p0
clamav clamav=0.66
clamav clamav=0.51
clamav clamav=0.52
clamav clamav=0.22
clamav clamav=0.72
clamav clamav=0.91-rc2
clamav clamav=0.75
clamav clamav=0.05
clamav clamav=0.91
clamav clamav=0.54
clamav clamav=0.80
clamav clamav=0.87
clamav clamav=0.21
clamav clamav=0.84-rc2
clamav clamav=0.88.7_p1
clamav clamav=0.67-1
clamav clamav=0.14-pre
clamav clamav=0.90.1
clamav clamav=0.91.1
clamav clamav=0.88.3
clamav clamav=0.67
clamav clamav=0.90.2
clamav clamav=0.68
clamav clamav=0.53
clamav clamav=0.88.6
clamav clamav=0.80_rc
clamav clamav=0.82
clamav clamav=0.73
Remediation
Event History
Feb 12, 2008
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0728?
CVE-2008-0728 has a medium severity due to its potential for heap corruption.
2
How do I fix CVE-2008-0728?
To fix CVE-2008-0728, upgrade ClamAV to version 0.92.1 or later.
3
Which versions of ClamAV are affected by CVE-2008-0728?
CVE-2008-0728 affects ClamAV versions before 0.92.1, including various previous versions.
4
What is the impact of CVE-2008-0728?
CVE-2008-0728 may lead to undefined behavior, including heap corruption, which could be exploited by attackers.
5
Is CVE-2008-0728 remotely exploitable?
The exact attack vectors for CVE-2008-0728 are unknown, making it potentially exploitable in various ways.