Debian/clamav: unknown

libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an "invalid memory access."

Action: Upgrade clamav to 0.94.dfsg-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1389#Debian:13/clamav
• https://security-tracker.debian.org/tracker/CVE-2008-1389

published 2008-09-04T16:41:00Z · modified 2026-10-23T17:47:48.112505360Z · JSON