Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2016-1371

ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable.

VectorLOCAL

PublishedOct 03, 2016, 18:59

Published Bypsirt@cisco.com

Base Score

Score5.5

Affected Versions

No affected versions found.

References

http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html
http://www.securityfocus.com/bid/93222
http://www.ubuntu.com/usn/USN-3093-1
https://bugzilla.clamav.net/show_bug.cgi?id=11514
https://foxglovesecurity.com/2016/06/13/finding-pearls-fuzzing-clamav/

Weakness Type

CWE-284

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.0

Attack Vector (AV)

LOCAL