CVE-2010-0098: Critical severity clamav clamav vulnerability
Published Apr 8, 2010
·Updated
ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities.
Affected Software
96 affected components
clamav clamav=0.95.2
clamav clamav=0.86.2
clamav clamav=0.88.5
clamav clamav=0.02
clamav clamav=0.92
clamav clamav=0.95-rc2
clamav clamav=0.15
clamav clamav=0.90-rc2
clamav clamav=0.75.1
clamav clamav=0.65
clamav clamav=0.88.7
clamav clamav=0.81
clamav clamav=0.86
clamav clamav=0.01
clamav clamav=0.85
clamav clamav=0.84
clamav clamav=0.3
clamav clamav=0.93.1
Clamavs Clamav=0.04
clamav clamav=0.90-rc1.1
clamav clamav=0.95.1
clamav clamav=0.93
clamav clamav=0.90
clamav clamav=0.70-rc
clamav clamav=0.86-rc1
clamav clamav=0.68.1
clamav clamav=0.03
clamav clamav=0.87.1
clamav clamav=0.9-rc1
clamav clamav=0.74
clamav clamav=0.93.3
clamav clamav=0.88
clamav clamav=0.91-rc1
clamav clamav=0.86.1
clamav clamav=0.71
clamav clamav=0.88.1
clamav clamav=0.60p
clamav clamav=0.94
clamav clamav=0.80-rc
clamav clamav=0.91.2
clamav clamav=0.90.3
clamav clamav=0.85.1
clamav clamav=0.90-rc1
clamav clamav=0.13
clamav clamav=0.10
clamav clamav=0.94.2
clamav clamav=0.80-rc3
clamav clamav=0.12
clamav clamav=0.23
clamav clamav=0.84-rc1
clamav clamav=0.80-rc2
clamav clamav=0.95
clamav clamav=0.60
clamav clamav=0.88.2
clamav clamav=0.83
clamav clamav=0.20
clamav clamav=0.80-rc4
clamav clamav=0.90-rc3
clamav clamav=0.70
clamav clamav=0.88.4
clamav clamav=0.14
clamav clamav=0.24
clamav clamav=0.66
clamav clamav=0.51
clamav clamav=0.52
clamav clamav=0.22
clamav clamav=0.72
clamav clamav=0.95-rc1
Clamavs Clamav=0.06
clamav clamav=0.91-rc2
clamav clamav=0.75
clamav clamav=0.05
clamav clamav=0.91
clamav clamav=0.54
clamav clamav=0.96-rc1
clamav clamav=0.80
clamav clamav<=0.96
clamav clamav=0.87
clamav clamav=0.21
clamav clamav=0.84-rc2
clamav clamav=0.67-1
clamav clamav=0.14-pre
clamav clamav=0.90.1
clamav clamav=0.91.1
clamav clamav=0.95.3
clamav clamav=0.88.3
clamav clamav=0.67
clamav clamav=0.92.1
clamav clamav=0.90.2
clamav clamav=0.68
clamav clamav=0.53
clamav clamav=0.93.2
clamav clamav=0.88.6
clamav clamav=0.94.1
clamav clamav=0.82
clamav clamav=0.73
Remediation
Patch Available
Event History
Apr 8, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:30 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0098?
CVE-2010-0098 has a moderate severity level due to its potential to allow bypassing of virus detection.
2
How do I fix CVE-2010-0098?
To fix CVE-2010-0098, update ClamAV to version 0.96 or later, where this vulnerability is addressed.
3
Which versions of ClamAV are affected by CVE-2010-0098?
CVE-2010-0098 affects multiple versions of ClamAV prior to 0.96, including 0.95.2 and earlier.
4
What types of files are improperly handled due to CVE-2010-0098?
CVE-2010-0098 specifically affects CAB and 7z file formats within ClamAV.
5
Can CVE-2010-0098 be exploited remotely?
Yes, CVE-2010-0098 can be exploited remotely through crafted archive files.