CVE-2008-0728
published 2008-02-12CVE-2008-0728: The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
PriorityP431critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
2.81%
85.1th percentile
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
Affected
78 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clamav | clamav | <= 0.92 | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jc8j-c4rx-788x: The unmew11 function in libclamav/mew
ghsa_unreviewed·2022-05-01
CVE-2008-0728 [HIGH] GHSA-jc8j-c4rx-788x: The unmew11 function in libclamav/mew
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
OSV
CVE-2008-0728: The unmew11 function in libclamav/mew
osv·2008-02-12·CVSS 10.0
CVE-2008-0728 [CRITICAL] CVE-2008-0728: The unmew11 function in libclamav/mew
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
Debian
CVE-2008-0728: clamav - The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has...
vendor_debian·2008·CVSS 10.0
CVE-2008-0728 [CRITICAL] CVE-2008-0728: clamav - The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has...
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
Scope: local
bookworm: resolved (fixed in 0.92.1~dfsg-1)
bullseye: resolved (fixed in 0.92.1~dfsg-1)
forky: resolved (fixed in 0.92.1~dfsg-1)
sid: resolved (fixed in 0.92.1~dfsg-1)
trixie: resolved (fixed in 0.92.1~dfsg-1)
Red Hat
clamav: libclamav heap corruption
vendor_redhat·CVSS 10.0
CVE-2008-0728 [CRITICAL] clamav: libclamav heap corruption
clamav: libclamav heap corruption
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
No detection rules found.
No public exploits indexed.
http://bugs.gentoo.org/show_bug.cgi?id=209915http://docs.info.apple.com/article.html?artnum=307562http://kolab.org/security/kolab-vendor-notice-19.txthttp://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.htmlhttp://secunia.com/advisories/28907http://secunia.com/advisories/29001http://secunia.com/advisories/29026http://secunia.com/advisories/29048http://secunia.com/advisories/29060http://secunia.com/advisories/29420http://security.gentoo.org/glsa/glsa-200802-09.xmlhttp://sourceforge.net/project/shownotes.php?release_id=575703http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:088http://www.vupen.com/english/advisories/2008/0503http://www.vupen.com/english/advisories/2008/0606http://www.vupen.com/english/advisories/2008/0924/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/40474http://bugs.gentoo.org/show_bug.cgi?id=209915http://docs.info.apple.com/article.html?artnum=307562http://kolab.org/security/kolab-vendor-notice-19.txthttp://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.htmlhttp://secunia.com/advisories/28907http://secunia.com/advisories/29001http://secunia.com/advisories/29026http://secunia.com/advisories/29048http://secunia.com/advisories/29060http://secunia.com/advisories/29420http://security.gentoo.org/glsa/glsa-200802-09.xmlhttp://sourceforge.net/project/shownotes.php?release_id=575703http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:088http://www.vupen.com/english/advisories/2008/0503http://www.vupen.com/english/advisories/2008/0606http://www.vupen.com/english/advisories/2008/0924/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/40474
2008-02-12
Published