| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | = 0.15= 0.20= 0.21= 0.22= 0.23= 0.24= 0.51= 0.52= 0.53= 0.54= 0.60= 0.60p= 0.65= 0.67= 0.68= 0.68.1= 0.70= 0.71= 0.72= 0.73= 0.74= 0.75= 0.75.1= 0.80= 0.80_rc1= 0.80_rc2= 0.80_rc3= 0.80_rc4= 0.81= 0.81_rc1= 0.82= 0.83= 0.84= 0.84_rc1= 0.84_rc2= 0.85= 0.85.1= 0.86= 0.86.1= 0.86.2= 0.86_rc1= 0.87= 0.87.1= 0.88= 0.88.1= 0.88.3= 0.88.4= 0.88.5= 0.88.6= 0.88.7= 0.90= 0.90.1= 0.90.2= 0.90_rc1.1= 0.90_rc2= 0.90_rc3= 0.90rc1= 0.91= 0.91.1= 0.91.2= 0.91rc1= 0.91rc2= 0.92≤ 0.92.1 |
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free