CVE-2009-1270

HIGH 7.8CVE-2009-1270 · Published 08/04/2009 · updated 16/06/2026

In short

CVE-2009-1270 is a HIGH (CVSS 7.8) vulnerability affecting clamav (clamav).
Chance of exploitation in the next 30 days (EPSS): 5.1%, higher than 92.3% of all vulnerabilities.
Fix: update to 0.95 or later.

Package	Affected versions	Patched versions
clamav clamav	`< 0.95`	`0.95`

Description

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.

References

lists.apple.com/archives/security-announce/2009/Sep/msg00004.html · Mailing List
osvdb.org/53461 · Broken Link
secunia.com/advisories/34716 · Third Party Advisory
secunia.com/advisories/36701 · Third Party Advisory
support.apple.com/kb/HT3865 · Third Party Advisory
debian.org/security/2009/dsa-1771 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
openwall.com/lists/oss-security/2009/04/07/6 · Mailing List
securityfocus.com/bid/34357 · Third Party Advisory
ubuntu.com/usn/usn-754-1 · Third Party Advisory
vupen.com/english/advisories/2009/0934 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/49846 · Third Party Advisory
wwws.clamav.net/bugzilla/show_bug.cgi

More vulnerabilities in clamav

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

clamav

< 0.95

0.95

More vulnerabilities in clamav

See all →