Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-1389

Fixed in a distro release EPSS 3%

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

Published 2008-09-04 · CVE record · OSV

Products: clam_anti-virus clamav

Distro releases

ReleasePackageFixed in
Debian 12clamav0.94.dfsg-1
Debian 13clamav0.94.dfsg-1
Debian 14clamav0.94.dfsg-1