Skip to content
OpenAdvisories
Unscored USN-2423-1 2 CVEs

clamav vulnerabilities

Published Nov 26, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2013-6497)

Damien Millescamp discovered that ClamAV incorrectly handled certain PE
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2014-9050)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS clamav 0.98.5+addedllvm-0ubuntu0.14.04.1

Vulnerabilities 2

  • Unscored —
    CVE-2013-6497

    clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as…

    clamav clamav Debian Ubuntu
  • Unscored —
    CVE-2014-9050

    Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers…

    clamav clamav Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2013-6497
  • report
    https://ubuntu.com/security/CVE-2014-9050