CVE-2009-1241 — Clamav vulnerability

7 documents7 sources
Severity
7.5HIGHNVD
EPSS
2.2%
top 15.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
ClamavDebian ClamavMsrc CBL Mariner 1.0 ARM+1 more
Timeline
PublishedApr 3
Latest updateMay 2

Description

Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages5 packages

▶NVDclamav/clamav< 0.95
▶debiandebian/clamav< clamav 0.95+dfsg-1 (bookworm)
▶Debianclamav/clamav< 0.95+dfsg-1+3

🔴Vulnerability Details

2
GHSA
GHSA-c7vw-qrg6-jjm5: Unspecified vulnerability in ClamAV before 0↗2022-05-02
▶
OSV
CVE-2009-1241: Unspecified vulnerability in ClamAV before 0↗2009-04-03
▶

📋Vendor Advisories

3
Microsoft
CVE-2009-1241: NIST NVD Details: https://nvd↗2020-10-13
▶
Debian
CVE-2009-1241: clamav - Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypas...↗2009
▶
Red Hat
clamav: security fixes in upstream 0.95 (CVE-2008-6680, CVE-2009-1270)↗
▶

💬Community

1
Bugzilla
clamav: security fixes in upstream 0.95 (CVE-2008-6680, CVE-2009-1270)↗2009-04-09
▶