CVE-2008-1836: Medium severity cisco clamav vulnerability
Published Apr 16, 2008
·Updated
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
Affected Software
8 affected components
Clam Anti-Virus clamav=0.92
Clam Anti-Virus clamav=0.90rc1
Clam Anti-Virus clamav=0.90.1
Clam Anti-Virus clamav=0.91
Clam Anti-Virus clamav=0.90
Clam Anti-Virus clamav=0.90_rc1.1
Clam Anti-Virus clamav=0.90_rc2
Clam Anti-Virus clamav=0.90_rc3
Event History
Apr 16, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1836?
CVE-2008-1836 has a severity rating that indicates it can lead to a denial of service due to a buffer over-read.
2
Which versions of ClamAV are affected by CVE-2008-1836?
CVE-2008-1836 affects ClamAV versions 0.90 through 0.92, including release candidates.
3
How do I fix CVE-2008-1836?
To fix CVE-2008-1836, upgrade ClamAV to version 0.93 or later.
4
What impact does CVE-2008-1836 have on systems?
CVE-2008-1836 can cause a denial of service, resulting in the affected application crashing.
5
Can CVE-2008-1836 be exploited remotely?
Yes, CVE-2008-1836 can be exploited remotely by attackers using crafted messages.