Read the docs
TI-2011-00863 Aliases CVE-2011-1003GHSA-vmrc-q6qc-cw92

Double free vulnerability in the vba_read_project_strings function in vba_extract.c in…

Priority LOW 37CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.

Why it matters now

EPSS 0.04215 91st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 114

CPEVersionsRoleVendor
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*up to 0.96.5VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*0.01VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*0.02VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*0.3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*0.03VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*0.05VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.8:rc3:*:*:*:*:*:*0.8 rc3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.9:rc1:*:*:*:*:*:*0.9 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*0.10VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*0.12VulnerableClamAV
  • cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:* Versions up to 0.96.5 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:* Versions 0.01 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:* Versions 0.02 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:* Versions 0.03 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:* Versions 0.05 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.8:rc3:*:*:*:*:*:* Versions 0.8 rc3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.9:rc1:*:*:*:*:*:* Versions 0.9 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:* Versions 0.10 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:* Versions 0.12 Vulnerable ·ClamAV
Show 104 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*0.13VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.14:*:*:*:*:*:*:*0.14VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*0.14 preVulnerableClamAV
cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*0.15VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*0.20VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*0.21VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*0.22VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*0.23VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*0.24VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*0.51VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*0.52VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*0.53VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*0.54VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*0.60VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*0.60pVulnerableClamAV
cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*0.65VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*0.66VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*0.67VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*0.67-1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*0.68VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*0.68.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*0.70VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*0.70 rcVulnerableClamAV
cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*0.71VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*0.72VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*0.73VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*0.74VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*0.75VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*0.75.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*0.80VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.80:rc:*:*:*:*:*:*0.80 rcVulnerableClamAV
cpe:2.3:a:clamav:clamav:0.80:rc1:*:*:*:*:*:*0.80 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.80:rc2:*:*:*:*:*:*0.80 rc2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.80:rc3:*:*:*:*:*:*0.80 rc3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*0.80 rc4VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*0.80_rcVulnerableClamAV
cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*0.81VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.81:rc1:*:*:*:*:*:*0.81 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*0.82VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*0.83VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*0.84VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:*0.84 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.84:rc2:*:*:*:*:*:*0.84 rc2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*0.85VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*0.85.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*0.86VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.86:rc1:*:*:*:*:*:*0.86 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*0.86.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*0.86.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*0.87VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*0.87.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*0.88VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*0.88.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*0.88.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*0.88.3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*0.88.4VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*0.88.5VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*0.88.6VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*0.88.7VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*0.88.7_p0VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*0.88.7_p1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*0.90VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90:rc1:*:*:*:*:*:*0.90 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90:rc1.1:*:*:*:*:*:*0.90 rc1.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90:rc2:*:*:*:*:*:*0.90 rc2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90:rc3:*:*:*:*:*:*0.90 rc3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*0.90.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*0.90.1_p0VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*0.90.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*0.90.2_p0VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*0.90.3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*0.90.3_p0VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*0.90.3_p1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*0.91VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.91:rc1:*:*:*:*:*:*0.91 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.91:rc2:*:*:*:*:*:*0.91 rc2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*0.91.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*0.91.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*0.91.2_p0VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*0.92VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*0.92.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*0.92_p0VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*0.93VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*0.93.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*0.93.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*0.93.3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*0.94VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*0.94.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*0.94.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:*0.95VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95:rc1:*:*:*:*:*:*0.95 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95:rc2:*:*:*:*:*:*0.95 rc2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*0.95 src1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95:src2:*:*:*:*:*:*0.95 src2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95.1:*:*:*:*:*:*:*0.95.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95.2:*:*:*:*:*:*:*0.95.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.95.3:*:*:*:*:*:*:*0.95.3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.96:*:*:*:*:*:*:*0.96VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.96:rc1:*:*:*:*:*:*0.96 rc1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.96:rc2:*:*:*:*:*:*0.96 rc2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.96.1:*:*:*:*:*:*:*0.96.1VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.96.2:*:*:*:*:*:*:*0.96.2VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.96.3:*:*:*:*:*:*:*0.96.3VulnerableClamAV
cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*0.96.4VulnerableClamAV
  • cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:* Versions 0.13 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.14:*:*:*:*:*:*:* Versions 0.14 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:* Versions 0.14 pre Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:* Versions 0.15 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:* Versions 0.20 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:* Versions 0.21 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:* Versions 0.22 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:* Versions 0.23 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:* Versions 0.24 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:* Versions 0.51 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:* Versions 0.52 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:* Versions 0.53 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:* Versions 0.54 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:* Versions 0.60 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:* Versions 0.60p Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:* Versions 0.65 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:* Versions 0.66 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:* Versions 0.67 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:* Versions 0.67-1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:* Versions 0.68 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:* Versions 0.68.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:* Versions 0.70 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:* Versions 0.70 rc Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:* Versions 0.71 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:* Versions 0.72 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:* Versions 0.73 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:* Versions 0.74 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:* Versions 0.75 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:* Versions 0.75.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:* Versions 0.80 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.80:rc:*:*:*:*:*:* Versions 0.80 rc Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.80:rc1:*:*:*:*:*:* Versions 0.80 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.80:rc2:*:*:*:*:*:* Versions 0.80 rc2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.80:rc3:*:*:*:*:*:* Versions 0.80 rc3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:* Versions 0.80 rc4 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:* Versions 0.80_rc Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:* Versions 0.81 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.81:rc1:*:*:*:*:*:* Versions 0.81 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:* Versions 0.82 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:* Versions 0.83 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:* Versions 0.84 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:* Versions 0.84 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.84:rc2:*:*:*:*:*:* Versions 0.84 rc2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:* Versions 0.85 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:* Versions 0.85.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:* Versions 0.86 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.86:rc1:*:*:*:*:*:* Versions 0.86 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:* Versions 0.86.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:* Versions 0.86.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:* Versions 0.87 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:* Versions 0.87.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:* Versions 0.88 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:* Versions 0.88.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:* Versions 0.88.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:* Versions 0.88.3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:* Versions 0.88.4 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:* Versions 0.88.5 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:* Versions 0.88.6 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:* Versions 0.88.7 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:* Versions 0.88.7_p0 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:* Versions 0.88.7_p1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90:rc1:*:*:*:*:*:* Versions 0.90 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90:rc1.1:*:*:*:*:*:* Versions 0.90 rc1.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90:rc2:*:*:*:*:*:* Versions 0.90 rc2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90:rc3:*:*:*:*:*:* Versions 0.90 rc3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:* Versions 0.90.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:* Versions 0.90.1_p0 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:* Versions 0.90.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:* Versions 0.90.2_p0 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:* Versions 0.90.3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:* Versions 0.90.3_p0 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:* Versions 0.90.3_p1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.91:rc1:*:*:*:*:*:* Versions 0.91 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.91:rc2:*:*:*:*:*:* Versions 0.91 rc2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:* Versions 0.91.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:* Versions 0.91.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:* Versions 0.91.2_p0 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:* Versions 0.92.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:* Versions 0.92_p0 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:* Versions 0.93.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:* Versions 0.93.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:* Versions 0.93.3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:* Versions 0.94 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:* Versions 0.94.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:* Versions 0.94.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:* Versions 0.95 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95:rc1:*:*:*:*:*:* Versions 0.95 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95:rc2:*:*:*:*:*:* Versions 0.95 rc2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:* Versions 0.95 src1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95:src2:*:*:*:*:*:* Versions 0.95 src2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95.1:*:*:*:*:*:*:* Versions 0.95.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95.2:*:*:*:*:*:*:* Versions 0.95.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.95.3:*:*:*:*:*:*:* Versions 0.95.3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.96:*:*:*:*:*:*:* Versions 0.96 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.96:rc1:*:*:*:*:*:* Versions 0.96 rc1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.96:rc2:*:*:*:*:*:* Versions 0.96 rc2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.96.1:*:*:*:*:*:*:* Versions 0.96.1 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.96.2:*:*:*:*:*:*:* Versions 0.96.2 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.96.3:*:*:*:*:*:*:* Versions 0.96.3 Vulnerable ·ClamAV
  • cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:* Versions 0.96.4 Vulnerable ·ClamAV

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-1003
  2. 2026-10-03 Alias added: GHSA-vmrc-q6qc-cw92

References

Advisory 7

Other 7

  • TI-2024-13262 ClamAV VirusEvent File Processing Command Injection Vulnerability CVSS 3.1MEDIUM 5.3
  • TI-2023-06741 Buffer overflow in Cisco Secure Web Appliance CVSS 3.1CRITICAL 9.8
  • TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
  • TI-2012-01279 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!… CVSS 2.0MEDIUM 4.3
  • TI-2012-01265 The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat… CVSS 2.0MEDIUM 4.3
  • TI-2017-09151 Memory corruption in ClamAV AntiVirus software versions 0.99.2 and prior CVSS 3.0CRITICAL 9.8
See all 102 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences