CVE-2008-1836 describes a denial-of-service vulnerability in ClamAV versions prior to 0.93. The flaw resides in the rfc2231 function within libclamav, where a crafted message can lead to a buffer over-read due to an improperly null-terminated string, causing the application to crash. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial availability impact, requiring network access but no authentication. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.90CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:* | ||
0.90.1CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:* | ||
0.90_rc1.1CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:* | ||
0.90_rc2CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:* | ||
0.90_rc3CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.