CVE-2008-1836
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to...
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
Exploit likelihood
What each source reports
NVD Score used
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
- Record
CVE-2008-1836- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
- Record
CVE-2008-1836- Updated
- 2026-11-02
EUVDEUVD-2008-1836 No score
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
- Record
EUVD-2008-1836- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2g4m-frjw-86jj No score
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to...
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
- Record
GHSA-2g4m-frjw-86jj- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1836 is a medium vulnerability (CVSS 4.3) in Clam Anti-virus Clamav, published April 16, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.55%, the 89th percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDVSA-2008:088
wwws.clamav.net/bugzilla/show_bug.cgi?id=881
redhat.com/archives/fedora-package-announce/2008-May/msg00249.html
security.gentoo.org/glsa/glsa-200805-19.xml
lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
up2date.astaro.com/2008/08/up2date_asg_v7300_ga_released.html
Show 12 moreShow less
secunia.com/advisories/29891
us-cert.gov/cas/techalerts/TA08-260A.html
securityfocus.com/bid/28784
vupen.com/english/advisories/2008/2584
exchange.xforce.ibmcloud.com/vulnerabilities/41868
lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
nvd.nist.gov/vuln/detail/CVE-2008-1836
github.com/advisories/GHSA-2g4m-frjw-86jj