logo

Database

Lack of data validation - Path Traversal In clamav

Description

ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2010-00982. NVD-2010-00983. OSV-DEBIAN-2010-00984. OSV-2010-00985. SECURITY-TRACKER-CVE-2010-0098

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.