Description
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | clamav | 0.94.dfsg.2-1 | — |
| Debian 13 | clamav | 0.94.dfsg.2-1 | — |
| Debian 12 | clamav | 0.94.dfsg.2-1 | — |
| Debian 4.0 | clamav | 0.90.1dfsg-4etch16 | DSA-1680-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- ClamAV < 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC) EDB-7330 · dos · Dec 3, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- DSA-1680-1 clamav - potential code execution Debian Security (DSA / DLA) · Mar 9, 2026
References
- 32936 third-party-advisory
- 7330 exploit
- 33195 third-party-advisory
- USN-684-1 vendor-advisory
- 33937 third-party-advisory
- DSA-1680 vendor-advisory
- 32926 third-party-advisory
- 1021296 vdb-entry
- ADV-2008-3311 vdb-entry
- 33016 third-party-advisory
- http://support.apple.com/kb/HT3438
- APPLE-SA-2009-02-12 vendor-advisory
- [clamav-announce] 20081126 announcing ClamAV 0.94.2 mailing-list
- 50363 vdb-entry
- GLSA-200812-21 vendor-advisory
- clamav-special-dos(46985) vdb-entry
- ADV-2009-0422 vdb-entry
- [oss-security] 20081201 CVE request: clamav 0.94.2 mailing-list
- MDVSA-2008:239 vendor-advisory
- http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=643134
- SUSE-SR:2008:028 vendor-advisory
- 32555 vdb-entry
- 33317 third-party-advisory
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1266