CVE-2008-6680 - Vulnerability Details - OpenCVE

libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.07137.

Key SSVC decision points have not yet been added.

Vendors	Products
Clamav	Clamav

Configuration 1 [-]

OR	cpe:2.3:a:clamav:clamav::::::::
	cpe:2.3:a:clamav:clamav:0.93.1:::::::*
	cpe:2.3:a:clamav:clamav:0.94:::::::*
	cpe:2.3:a:clamav:clamav:0.94.1:::::::*

No data.

No data.

Advisories

Source	ID	Title
Debian DSA	DSA-1771-1	New clamav packages fix several vulnerabilities
EUVD	EUVD-2008-6642	libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error.
Ubuntu USN	USN-754-1	ClamAV vulnerabilities

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
http://secunia.com/advisories/34716
http://secunia.com/advisories/36701
http://support.apple.com/kb/HT3865
http://www.debian.org/security/2009/dsa-1771
http://www.mandriva.com/security/advisories?name=MDVSA-2009:097
http://www.openwall.com/lists/oss-security/2009/04/07/6
http://www.securityfocus.com/bid/34357
http://www.ubuntu.com/usn/usn-754-1
http://www.vupen.com/english/advisories/2009/0934
https://exchange.xforce.ibmcloud.com/vulnerabilities/49845
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-04-08T16:00:00

Updated: 2024-08-07T11:41:59.403Z

Reserved: 2009-04-08T00:00:00

Link: CVE-2008-6680

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-04-08T16:30:00.420

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-6680

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-12-31T00:00:00", "descriptions": [{"lang": "en", "value": "libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335"}, {"name": "34357", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34357"}, {"name": "34716", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34716"}, {"name": "MDVSA-2009:097", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097"}, {"name": "ADV-2009-0934", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0934"}, {"name": "APPLE-SA-2009-09-10-2", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"}, {"name": "DSA-1771", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2009/dsa-1771"}, {"name": "[oss-security] 20090407 Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2009/04/07/6"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/kb/HT3865"}, {"name": "36701", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/36701"}, {"name": "USN-754-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/usn-754-1"}, {"name": "clamav-exe-dos(49845)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49845"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-6680", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335", "refsource": "CONFIRM", "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335"}, {"name": "34357", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34357"}, {"name": "34716", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34716"}, {"name": "MDVSA-2009:097", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097"}, {"name": "ADV-2009-0934", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0934"}, {"name": "APPLE-SA-2009-09-10-2", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"}, {"name": "DSA-1771", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2009/dsa-1771"}, {"name": "[oss-security] 20090407 Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2009/04/07/6"}, {"name": "http://support.apple.com/kb/HT3865", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT3865"}, {"name": "36701", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/36701"}, {"name": "USN-754-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-754-1"}, {"name": "clamav-exe-dos(49845)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49845"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T11:41:59.403Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335"}, {"name": "34357", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34357"}, {"name": "34716", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34716"}, {"name": "MDVSA-2009:097", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097"}, {"name": "ADV-2009-0934", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0934"}, {"name": "APPLE-SA-2009-09-10-2", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"}, {"name": "DSA-1771", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2009/dsa-1771"}, {"name": "[oss-security] 20090407 Re: CVE request: clamav clamd and clamscan DoS and bypass by malformated archive", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2009/04/07/6"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/kb/HT3865"}, {"name": "36701", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/36701"}, {"name": "USN-754-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/usn-754-1"}, {"name": "clamav-exe-dos(49845)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49845"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-6680", "datePublished": "2009-04-08T16:00:00", "dateReserved": "2009-04-08T00:00:00", "dateUpdated": "2024-08-07T11:41:59.403Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*", "matchCriteriaId": "42BBC078-58AE-4792-BA8A-CEEF912E8F3E", "versionEndIncluding": "0.94.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*", "matchCriteriaId": "AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5", "vulnerable": true}, {"criteria": "cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*", "matchCriteriaId": "F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*", "matchCriteriaId": "0722860E-934A-49CA-BEAD-0EB05AA6E4C6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error."}, {"lang": "es", "value": "libclamav/pe.c en ClamAV anteriores a v0.95 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) a trav\u00e9s de un fichero manipulado que provoca un error de divisi\u00f3n por 0.\r\n"}], "id": "CVE-2008-6680", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-04-08T16:30:00.420", "references": [{"source": "cve@mitre.org", "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/34716"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/36701"}, {"source": "cve@mitre.org", "url": "http://support.apple.com/kb/HT3865"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2009/dsa-1771"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2009/04/07/6"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/34357"}, {"source": "cve@mitre.org", "url": "http://www.ubuntu.com/usn/usn-754-1"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/0934"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49845"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/34716"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/36701"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://support.apple.com/kb/HT3865"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2009/dsa-1771"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2009/04/07/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/34357"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/usn-754-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2009/0934"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49845"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1335"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}