CVE-2008-5314

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote...

4.3 MediumPublic exploitFix available

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.

Exploit likelihood

8.20%Up 2.8 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2008-5314
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-5314
Updated: 2026-11-02

EUVDEUVD-2008-5291 No score

Record: EUVD-2008-5291
Updated: 2026-11-03

GitHub AdvisoriesGHSA-73rj-52cv-hrpx No score

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote...

Record: GHSA-73rj-52cv-hrpx
Updated: 2026-11-02

OSV No score

Record: CVE-2008-5314
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-5314 No score

Record: DEBIAN-CVE-2008-5314
Updated: 2026-11-02

Affected products

clam anti-virus clamav

Affected packages

Affected packages
Package	Affected	Fixed
`clamav` Debian:12	before 0.94.dfsg.2-1	0.94.dfsg.2-1
`clamav` Debian:13	before 0.94.dfsg.2-1	0.94.dfsg.2-1
`clamav` Debian:14	before 0.94.dfsg.2-1	0.94.dfsg.2-1
`clamav` Debian:4.0 From an advisory covering 2 CVEs	before 0.90.1dfsg-4etch16, plus listed versions 0.90.1-20.90.1-3.1lenny20.90.1-3.1lenny30.90.1-3etch10.90.1-3etch2 Show 12 moreShow less 0.90.1-3etch30.90.1-3etch40.90.1-3etch50.90.1-3etch60.90.1-3etch70.90.1-3etch80.90.1dfsg-3.1+etch140.90.1dfsg-3etch100.90.1dfsg-3etch110.90.1dfsg-3etch130.90.1dfsg-3etch90.90.1dfsg-4etch15	0.90.1dfsg-4etch16

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	ClamAV < 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC)	2008-12-03

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5314 is a medium vulnerability (CVSS 4.3) in Clam Anti-virus Clamav, published December 3, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.20%, the 94th percentile. Fixed in clamav 0.94.dfsg.2-1.

References

Show 21 moreShow less