FKIE_CVE-2009-1372

Vulnerability from fkie_nvd - Published: 2009-04-23 15:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL.
References
cve@mitre.orghttp://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
cve@mitre.orghttp://osvdb.org/53603
cve@mitre.orghttp://secunia.com/advisories/34612Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/36701
cve@mitre.orghttp://support.apple.com/kb/HT3865
cve@mitre.orghttp://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDVSA-2009:097
cve@mitre.orghttp://www.securityfocus.com/bid/34446
cve@mitre.orghttp://www.securitytracker.com/id?1022028
cve@mitre.orghttp://www.vupen.com/english/advisories/2009/0985Patch, Vendor Advisory
cve@mitre.orghttps://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553
af854a3a-2127-422b-91ae-364da2661108http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/53603
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34612Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/36701
af854a3a-2127-422b-91ae-364da2661108http://support.apple.com/kb/HT3865
af854a3a-2127-422b-91ae-364da2661108http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2009:097
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/34446
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1022028
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/0985Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553
Impacted products
Vendor Product Version
clamav clamav *
clamav clamav 0.01
clamav clamav 0.02
clamav clamav 0.3
clamav clamav 0.03
clamav clamav 0.05
clamav clamav 0.8_
clamav clamav 0.9_rc1
clamav clamav 0.10
clamav clamav 0.12
clamav clamav 0.13
clamav clamav 0.14
clamav clamav 0.15
clamav clamav 0.20
clamav clamav 0.21
clamav clamav 0.22
clamav clamav 0.23
clamav clamav 0.24
clamav clamav 0.51
clamav clamav 0.52
clamav clamav 0.53
clamav clamav 0.54
clamav clamav 0.60
clamav clamav 0.60p
clamav clamav 0.65
clamav clamav 0.66
clamav clamav 0.67
clamav clamav 0.67-1
clamav clamav 0.68
clamav clamav 0.68.1
clamav clamav 0.70
clamav clamav 0.70
clamav clamav 0.71
clamav clamav 0.72
clamav clamav 0.73
clamav clamav 0.74
clamav clamav 0.75
clamav clamav 0.75.1
clamav clamav 0.80
clamav clamav 0.80
clamav clamav 0.80_rc
clamav clamav 0.80_rc1
clamav clamav 0.80_rc2
clamav clamav 0.80_rc3
clamav clamav 0.81
clamav clamav 0.81_rc1
clamav clamav 0.82
clamav clamav 0.83
clamav clamav 0.84
clamav clamav 0.84_rc1
clamav clamav 0.84_rc2
clamav clamav 0.85
clamav clamav 0.85.1
clamav clamav 0.86
clamav clamav 0.86.1
clamav clamav 0.86.2
clamav clamav 0.86_rc1
clamav clamav 0.87
clamav clamav 0.87.1
clamav clamav 0.88
clamav clamav 0.88.1
clamav clamav 0.88.2
clamav clamav 0.88.3
clamav clamav 0.88.4
clamav clamav 0.88.5
clamav clamav 0.88.6
clamav clamav 0.88.7
clamav clamav 0.88.7_p0
clamav clamav 0.88.7_p1
clamav clamav 0.90
clamav clamav 0.90.1
clamav clamav 0.90.1_p0
clamav clamav 0.90.2
clamav clamav 0.90.2_p0
clamav clamav 0.90.3
clamav clamav 0.90.3_p0
clamav clamav 0.90.3_p1
clamav clamav 0.90_rc1
clamav clamav 0.90_rc1.1
clamav clamav 0.90_rc2
clamav clamav 0.90_rc3
clamav clamav 0.91
clamav clamav 0.91.1
clamav clamav 0.91.2
clamav clamav 0.91.2_p0
clamav clamav 0.91_rc1
clamav clamav 0.91_rc2
clamav clamav 0.92
clamav clamav 0.92.1
clamav clamav 0.92_p0
clamav clamav 0.93
clamav clamav 0.93.1
clamav clamav 0.93.2
clamav clamav 0.93.3
clamav clamav 0.94
clamav clamav 0.94.1
clamav clamav 0.94.2
clamav clamav 0.95
clamav clamav 0.95

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:clamav:clamav:*:src2:*:*:*:*:*:*",
              "matchCriteriaId": "6D8C3234-5194-4E3B-8503-526CB99E0E4C",
              "versionEndIncluding": "0.95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*",
              "matchCriteriaId": "68EC0AEB-91CF-4A79-AF40-A475E896FB45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*",
              "matchCriteriaId": "5935EDE0-9203-4150-9B7A-AB10B377F9F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "59C2680C-C187-487A-B6C4-F509E0C52436",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*",
              "matchCriteriaId": "A796E5E1-6481-49EF-8D97-9EC2A01C712B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*",
              "matchCriteriaId": "03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.8_:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "61ABEE1A-AABB-47D3-941D-81DCB198DC0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.9_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CAD151A-2494-41A5-9FDB-CE0082333FD1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "22958219-46D6-4868-B324-BFC2F2C893F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "4543DDEE-C1D1-428F-91C7-98B8985A5931",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FED760C-7106-49CE-B4FE-CA53A1092C14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*",
              "matchCriteriaId": "CABA4177-6B24-4364-BC34-D5ED171E60FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "F488ACB2-A013-4BF3-B5AC-897E40BA87F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D5799FA-DD99-4A35-BC56-B2FBEB747226",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "F32EA99F-088E-499E-9DCE-EFA9A64D1673",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8B04C5B-316D-4C6A-96CF-F145F7C9E636",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "E66D5CDE-ED5D-41BA-A4B1-28E8559EC056",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "20769174-C51F-47D5-A34F-EB772F542A57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*",
              "matchCriteriaId": "721B8B46-DFD9-4937-96A3-8D731304415B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDF18A59-FB30-45C6-B28E-4499DCD78F42",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B28E0BE-1E2D-45D2-B483-2D81326BF482",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7029650-6DF1-4616-BE9F-DE40E9BBE3A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*",
              "matchCriteriaId": "F47FD5DF-F22E-4B78-9B92-A9C41950F836",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1F9571F-9192-414F-B680-10A22C71CFDF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7CAC876-9AAC-407C-A34E-98AA6801D25F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*",
              "matchCriteriaId": "470FC8FE-785A-4934-8989-D17C1796870E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*",
              "matchCriteriaId": "79A6C0FE-2EED-447D-9F62-12CFF1E0918A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0928E05F-92E7-4451-AC11-4E6A014E1154",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2E7A70A-3584-4259-80CA-03AE290ABAE1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "24AF81C1-5B68-4D84-AFB9-C0419B7F98D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*",
              "matchCriteriaId": "D27D70A0-EC82-4DC7-A66D-60D263B76E37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*",
              "matchCriteriaId": "28C9C5AD-97A9-42C8-917C-2787785F5BEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4AB3389-1C30-47BB-9DAE-0F744E7F8877",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD4D3D3E-067B-4A37-A851-99D2A3E20FC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DA837A0-C8CB-486B-845E-A370E3137697",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*",
              "matchCriteriaId": "235A144A-4AB1-4756-AFB1-58AFFE02649E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*",
              "matchCriteriaId": "767BBE7F-6CC4-42D4-9730-6E617D36AAE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4EA7CD6A-133F-48E4-87BC-77CF21A25940",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*",
              "matchCriteriaId": "F65A7930-A913-4C3D-95A3-E629D6A468C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "9C24942D-7AD6-4391-8F05-2827AB6A751E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*",
              "matchCriteriaId": "BABA6024-1769-44D9-BF20-215602980A89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC10D578-B4C4-48A3-ADB6-09BEFEB440E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE4A3CF4-5295-47B5-8CC6-BD5B07C6618A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E28D6C24-5BF9-496D-AA74-28A5D1455225",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA719FE4-04E0-4664-8EEC-70CD613408DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.81_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D90B7512-74E3-4578-9473-1C8B1759B933",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*",
              "matchCriteriaId": "C859F864-B68F-4805-B804-E50F2C3FFE8E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5CAFEA5-C062-43EA-A302-38887DA6768C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*",
              "matchCriteriaId": "525DC218-308C-4A0E-96A7-DC74B8973B62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.84_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "52584216-2921-4299-AC4E-2118EA72997B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.84_rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EEC1A194-C333-4AAC-AE23-9ADEFFAA6377",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*",
              "matchCriteriaId": "72C71B82-8F84-4855-A138-7E7436788D69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "039341D8-8E2B-4901-BFA6-9CCC46A18C75",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*",
              "matchCriteriaId": "C048A75E-6587-485C-9F2B-E12BED34FF2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B003639-3228-4AC1-AB46-73481BB5DDA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.86_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "61F0A16A-4B50-4CF0-B857-3BAC06CDD54E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D6A495D-F9BB-41B9-A912-670D837EA278",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "45F5E6B4-88DD-4426-9FB6-D9009F6B8740",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB1EB857-D417-49EB-89FD-04733C872EE9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4551D5ED-6C72-4C9B-A556-491042A6113A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "01859947-09D4-417E-92A4-FA4F1625C60D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "797B7A3B-BAEA-4868-BC3E-CE629FE151F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "30337B76-E552-431F-B49C-A418E5B851A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "53027413-3353-4051-88FA-A46859AD747A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "970D5900-7F83-4140-A3E4-FF4E710DBD2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA0D4F76-258B-4E5D-AA4D-8231E846C76F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2A669CC-C10F-4E74-ACD0-DF933D723EB4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "13E8E7E7-E29A-4539-8D8C-45B9C39B0146",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A966F2C4-47A0-445F-8927-0F0222A48FB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7681419E-5125-40D6-BE61-57CE9C8F3DB3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CE0D056-B84F-4331-832C-5D1703A15A57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "96A13543-D7E2-41D6-8E8E-BE150ECDAA75",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*",
              "matchCriteriaId": "27310591-C883-4929-824A-AE99E7592D3D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2964A047-0277-4DA4-BDBE-3F5FC3C1F68E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "30CD371C-7B08-4A4B-AEB7-AC6BD199EE15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DBFE202-86D7-4AE3-AC5B-0902B5FEF18A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FBB0CE5-C6E7-469D-B3E4-1AB7FF677DFF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2B28501-9959-41D4-AA04-70706792611E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*",
              "matchCriteriaId": "E891471A-A0B8-4251-A6D3-60E947A18F70",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0E6A5E0-66E0-4EA7-9007-2389179500C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED827D10-C862-4BC7-AB33-06E040DAE161",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51DC9827-D7D1-4D34-AA35-6A7BDB92907D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.91_rc1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5511BAA8-2BA1-45C2-A4FB-6B8285CE62DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.91_rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A756F525-1527-49FB-B045-9709FA957836",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*",
              "matchCriteriaId": "37A3B776-0096-41B7-8D2E-C6F0B4F37458",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5AAC04C-FFC7-45D8-A29C-6B258CD56489",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A06278C4-328D-4D14-9BC1-DCA697EC9EDD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A66094D-050A-405E-AB0F-239A39F64E43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B931BDB2-DBE4-4983-ABFB-86941CDD14F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8FA4A86-C015-4F1F-B565-89410E70D053",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*",
              "matchCriteriaId": "F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0722860E-934A-49CA-BEAD-0EB05AA6E4C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "96F399F4-E7C0-4AD0-AA4F-C7C7FC2C466E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F0BB8C6-F0A3-418F-A457-93A4CC5BB6C6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*",
              "matchCriteriaId": "19A73FE2-2D4C-4B47-85C9-F8E3874992B6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en pila en la funci\u00f3n cli_url_canon en libclamav/phishcheck.c en ClamAV antes de 0.95.1 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (cuelgue de la aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo de su elecci\u00f3n mediante una URL manipulada."
    }
  ],
  "id": "CVE-2009-1372",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-04-23T15:30:00.577",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/53603"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34612"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/36701"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.apple.com/kb/HT3865"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel\u0026path=%2Ftrunk%2FChangeLog\u0026rev=5032"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/34446"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1022028"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/0985"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/53603"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34612"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/36701"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.apple.com/kb/HT3865"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://svn.clamav.net/websvn/filedetails.php?repname=clamav-devel\u0026path=%2Ftrunk%2FChangeLog\u0026rev=5032"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:097"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/34446"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1022028"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/0985"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1553"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…