CVE-2009-1371: Input Validation
Published Apr 23, 2009
·Updated
The CLIISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding.
Affected Software
99 affected components
clamav clamav=0.86.2
clamav clamav=0.88.5
clamav clamav=0.02
clamav clamav=0.92
clamav clamav=0.15
clamav clamav=0.75.1
clamav clamav=0.65
clamav clamav=0.88.7
clamav clamav=0.81
clamav clamav=0.86
clamav clamav=0.01
clamav clamav=0.92_p0
clamav clamav=0.85
clamav clamav=0.84
clamav clamav=0.3
clamav clamav=0.91.2_p0
clamav clamav=0.93.1
clamav clamav=0.93
clamav clamav=0.90
clamav clamav=0.70-rc
clamav clamav=0.68.1
clamav clamav=0.03
clamav clamav=0.87.1
clamav clamav=0.74
clamav clamav=0.93.3
clamav clamav=0.88
clamav clamav=0.86.1
clamav clamav=0.71
clamav clamav=0.88.1
clamav clamav=0.60p
clamav clamav=0.94
clamav clamav=0.91.2
clamav clamav=0.80_rc3
clamav clamav=0.91_rc2
clamav clamav=0.90.3
clamav clamav=0.80_rc2
clamav clamav=0.85.1
clamav clamav=0.91_rc1
clamav clamav=0.95-src2
clamav clamav=0.13
clamav clamav=0.90_rc1
clamav clamav=0.10
clamav clamav=0.94.2
clamav clamav=0.95-src1
clamav clamav=0.90.1_p0
clamav clamav=0.12
clamav clamav=0.88.7_p0
clamav clamav=0.23
clamav clamav=0.90.3_p1
clamav clamav=0.60
clamav clamav=0.84_rc2
clamav clamav=0.88.2
clamav clamav=0.83
clamav clamav=0.20
clamav clamav=0.80-rc4
clamav clamav=0.70
clamav clamav=0.88.4
clamav clamav=0.90.3_p0
clamav clamav=0.24
clamav clamav=0.90.2_p0
clamav clamav=0.81_rc1
clamav clamav=0.66
clamav clamav=0.51
clamav clamav=0.52
clamav clamav=0.8_-rc3
clamav clamav=0.22
clamav clamav=0.90_rc1.1
clamav clamav=0.84_rc1
clamav clamav=0.86_rc1
clamav clamav=0.72
clamav clamav=0.75
clamav clamav=0.05
clamav clamav=0.91
clamav clamav=0.54
clamav clamav=0.80
clamav clamav=0.87
clamav clamav=0.21
clamav clamav=0.80_rc1
clamav clamav=0.88.7_p1
clamav clamav<=0.95
clamav clamav=0.67-1
clamav clamav=0.90_rc2
clamav clamav=0.14-pre
clamav clamav=0.90.1
clamav clamav=0.90_rc3
clamav clamav=0.91.1
clamav clamav=0.88.3
clamav clamav=0.67
clamav clamav=0.92.1
clamav clamav=0.90.2
clamav clamav=0.68
clamav clamav=0.53
clamav clamav=0.93.2
clamav clamav=0.88.6
clamav clamav=0.94.1
clamav clamav=0.80_rc
clamav clamav=0.82
clamav clamav=0.9_rc1
clamav clamav=0.73
Remediation
Patch Available
Patch Available
Event History
Apr 23, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1371?
CVE-2009-1371 has a severity level that indicates it can lead to a denial of service (application crash).
2
How do I fix CVE-2009-1371?
To fix CVE-2009-1371, upgrade to ClamAV version 0.95.1 or later.
3
Which versions of ClamAV are affected by CVE-2009-1371?
CVE-2009-1371 affects ClamAV versions prior to 0.95.1.
4
What kind of attack does CVE-2009-1371 enable?
CVE-2009-1371 enables remote attackers to crash the application by sending a malformed file with UPack encoding.
5
What components are involved in CVE-2009-1371?
CVE-2009-1371 involves the CLI_ISCONTAINED macro in the libclamav/others.h file.