CVE - CVE-2008-5314

CVE-ID
CVE-2008-5314	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
APPLE:APPLE-SA-2009-02-12 URL:http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BID:32555 URL:http://www.securityfocus.com/bid/32555 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=643134 CONFIRM:http://support.apple.com/kb/HT3438 CONFIRM:https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266 DEBIAN:DSA-1680 URL:http://www.debian.org/security/2008/dsa-1680 EXPLOIT-DB:7330 URL:https://www.exploit-db.com/exploits/7330 GENTOO:GLSA-200812-21 URL:http://security.gentoo.org/glsa/glsa-200812-21.xml MANDRIVA:MDVSA-2008:239 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:239 MLIST:[clamav-announce] 20081126 announcing ClamAV 0.94.2 URL:http://lurker.clamav.net/message/20081126.150241.55b1e092.en.html MLIST:[oss-security] 20081201 CVE request: clamav 0.94.2 URL:http://www.openwall.com/lists/oss-security/2008/12/01/8 OSVDB:50363 URL:http://osvdb.org/50363 SECTRACK:1021296 URL:http://www.securitytracker.com/id?1021296 SECUNIA:32926 URL:http://secunia.com/advisories/32926 SECUNIA:32936 URL:http://secunia.com/advisories/32936 SECUNIA:33016 URL:http://secunia.com/advisories/33016 SECUNIA:33195 URL:http://secunia.com/advisories/33195 SECUNIA:33317 URL:http://secunia.com/advisories/33317 SECUNIA:33937 URL:http://secunia.com/advisories/33937 SUSE:SUSE-SR:2008:028 URL:http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html UBUNTU:USN-684-1 URL:http://www.ubuntu.com/usn/usn-684-1 VUPEN:ADV-2008-3311 URL:http://www.vupen.com/english/advisories/2008/3311 VUPEN:ADV-2009-0422 URL:http://www.vupen.com/english/advisories/2009/0422 XF:clamav-special-dos(46985) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/46985
Assigning CNA
MITRE Corporation
Date Entry Created
20081203	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20081203)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select “Other” from dropdown)