CVE-2008-1835
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an...
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
Exploit likelihood
What each source reports
NVD Score used
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
- Record
CVE-2008-1835- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
- Record
CVE-2008-1835- Updated
- 2026-11-02
EUVDEUVD-2008-1835 No score
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
- Record
EUVD-2008-1835- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xrjm-v355-frfj No score
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an...
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
- Record
GHSA-xrjm-v355-frfj- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1835 is a medium vulnerability (CVSS 5.0) in Clam Anti-virus Clamav, published April 16, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.03%, the 90th percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDVSA-2008:088
wwws.clamav.net/bugzilla/show_bug.cgi?id=541
security.gentoo.org/glsa/glsa-200805-19.xml
lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html
secunia.com/advisories/29891
Show 10 moreShow less
us-cert.gov/cas/techalerts/TA08-260A.html
securityfocus.com/bid/28784
vupen.com/english/advisories/2008/2584
exchange.xforce.ibmcloud.com/vulnerabilities/41874
lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
nvd.nist.gov/vuln/detail/CVE-2008-1835
github.com/advisories/GHSA-xrjm-v355-frfj