CVE-2008-2713: Medium severity cisco clamav vulnerability
Published Jun 16, 2008
·Updated
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.
Affected Software
57 affected components
Clam Anti-Virus clamav=0.24
Clam Anti-Virus clamav=0.20
Clam Anti-Virus clamav=0.84
Clam Anti-Virus clamav=0.90rc1
Clam Anti-Virus clamav=0.80
Clam Anti-Virus clamav=0.90.1
Clam Anti-Virus clamav=0.84_rc1
Clam Anti-Virus clamav=0.15
Clam Anti-Virus clamav=0.90
Clam Anti-Virus clamav=0.80_rc3
Clam Anti-Virus clamav=0.80_rc4
Clam Anti-Virus clamav=0.65
Clam Anti-Virus clamav=0.75
Clam Anti-Virus clamav=0.68
Clam Anti-Virus clamav=0.71
Clam Anti-Virus clamav=0.88.3
Clam Anti-Virus clamav=0.88.7
Clam Anti-Virus clamav=0.86.1
Clam Anti-Virus clamav=0.82
Clam Anti-Virus clamav=0.88.1
Clam Anti-Virus clamav=0.73
Clam Anti-Virus clamav=0.72
Clam Anti-Virus clamav=0.85.1
Clam Anti-Virus clamav=0.87
Clam Anti-Virus clamav=0.86_rc1
Clam Anti-Virus clamav=0.85
Clam Anti-Virus clamav=0.80_rc1
Clam Anti-Virus clamav=0.74
Clam Anti-Virus clamav=0.75.1
Clam Anti-Virus clamav=0.86.2
Clam Anti-Virus clamav=0.67
Clam Anti-Virus clamav=0.81
Clam Anti-Virus clamav=0.90.2
Clam Anti-Virus clamav=0.21
Clam Anti-Virus clamav=0.81_rc1
Clam Anti-Virus clamav=0.54
Clam Anti-Virus clamav=0.88.6
Clam Anti-Virus clamav=0.53
Clam Anti-Virus clamav=0.70
Clam Anti-Virus clamav=0.90_rc1.1
Clam Anti-Virus clamav=0.60p
Clam Anti-Virus clamav=0.90_rc2
Clam Anti-Virus clamav=0.90_rc3
Clam Anti-Virus clamav=0.80_rc2
Clam Anti-Virus clamav=0.88.5
Clam Anti-Virus clamav=0.60
Clam Anti-Virus clamav=0.86
Clam Anti-Virus clamav=0.83
Clam Anti-Virus clamav=0.68.1
Clam Anti-Virus clamav=0.88
Clam Anti-Virus clamav=0.87.1
Clam Anti-Virus clamav=0.88.4
Clam Anti-Virus clamav=0.84_rc2
Clam Anti-Virus clamav=0.51
Clam Anti-Virus clamav=0.23
Clam Anti-Virus clamav=0.52
Clam Anti-Virus clamav=0.22
Event History
Jun 16, 2008
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2713?
CVE-2008-2713 has a severity rating that can lead to denial of service due to an out-of-bounds read.
2
How do I fix CVE-2008-2713?
To fix CVE-2008-2713, upgrade to ClamAV version 0.93.1 or later.
3
What are the affected versions for CVE-2008-2713?
CVE-2008-2713 affects multiple versions of ClamAV including 0.24, 0.20, 0.84, and others prior to 0.93.1.
4
What causes CVE-2008-2713?
CVE-2008-2713 is caused by a crafted Petite file that triggers an out-of-bounds read in libclamav.
5
Can CVE-2008-2713 be exploited remotely?
Yes, CVE-2008-2713 can be exploited remotely by attackers using specially crafted files.