CVE-2009-1372
Published Apr 23, 2009
Last updated 15 years ago
Overview
- Description
- Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:clamav:clamav:*:src2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D8C3234-5194-4E3B-8503-526CB99E0E4C", "versionEndIncluding": "0.95" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68EC0AEB-91CF-4A79-AF40-A475E896FB45" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5935EDE0-9203-4150-9B7A-AB10B377F9F2" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59C2680C-C187-487A-B6C4-F509E0C52436" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A796E5E1-6481-49EF-8D97-9EC2A01C712B" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03FF3AE5-5BD9-43B4-9FB0-6BED8450C9ED" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.8_:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61ABEE1A-AABB-47D3-941D-81DCB198DC0F" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.9_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CAD151A-2494-41A5-9FDB-CE0082333FD1" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22958219-46D6-4868-B324-BFC2F2C893F7" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4543DDEE-C1D1-428F-91C7-98B8985A5931" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FED760C-7106-49CE-B4FE-CA53A1092C14" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CABA4177-6B24-4364-BC34-D5ED171E60FB" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F488ACB2-A013-4BF3-B5AC-897E40BA87F8" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D5799FA-DD99-4A35-BC56-B2FBEB747226" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F32EA99F-088E-499E-9DCE-EFA9A64D1673" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8B04C5B-316D-4C6A-96CF-F145F7C9E636" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E66D5CDE-ED5D-41BA-A4B1-28E8559EC056" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20769174-C51F-47D5-A34F-EB772F542A57" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "721B8B46-DFD9-4937-96A3-8D731304415B" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDF18A59-FB30-45C6-B28E-4499DCD78F42" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B28E0BE-1E2D-45D2-B483-2D81326BF482" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7029650-6DF1-4616-BE9F-DE40E9BBE3A0" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F47FD5DF-F22E-4B78-9B92-A9C41950F836" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1F9571F-9192-414F-B680-10A22C71CFDF" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7CAC876-9AAC-407C-A34E-98AA6801D25F" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "470FC8FE-785A-4934-8989-D17C1796870E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79A6C0FE-2EED-447D-9F62-12CFF1E0918A" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0928E05F-92E7-4451-AC11-4E6A014E1154" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2E7A70A-3584-4259-80CA-03AE290ABAE1" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24AF81C1-5B68-4D84-AFB9-C0419B7F98D1" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D27D70A0-EC82-4DC7-A66D-60D263B76E37" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28C9C5AD-97A9-42C8-917C-2787785F5BEA" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4AB3389-1C30-47BB-9DAE-0F744E7F8877" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD4D3D3E-067B-4A37-A851-99D2A3E20FC1" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DA837A0-C8CB-486B-845E-A370E3137697" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "235A144A-4AB1-4756-AFB1-58AFFE02649E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "767BBE7F-6CC4-42D4-9730-6E617D36AAE6" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EA7CD6A-133F-48E4-87BC-77CF21A25940" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F65A7930-A913-4C3D-95A3-E629D6A468C3" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C24942D-7AD6-4391-8F05-2827AB6A751E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BABA6024-1769-44D9-BF20-215602980A89" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC10D578-B4C4-48A3-ADB6-09BEFEB440E2" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE4A3CF4-5295-47B5-8CC6-BD5B07C6618A" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.80_rc3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E28D6C24-5BF9-496D-AA74-28A5D1455225" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA719FE4-04E0-4664-8EEC-70CD613408DD" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.81_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D90B7512-74E3-4578-9473-1C8B1759B933" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C859F864-B68F-4805-B804-E50F2C3FFE8E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5CAFEA5-C062-43EA-A302-38887DA6768C" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "525DC218-308C-4A0E-96A7-DC74B8973B62" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.84_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52584216-2921-4299-AC4E-2118EA72997B" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.84_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEC1A194-C333-4AAC-AE23-9ADEFFAA6377" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72C71B82-8F84-4855-A138-7E7436788D69" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "039341D8-8E2B-4901-BFA6-9CCC46A18C75" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C048A75E-6587-485C-9F2B-E12BED34FF2E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EC4D448-DDCD-4C0B-AA84-2D054FCF718C" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B003639-3228-4AC1-AB46-73481BB5DDA5" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.86_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61F0A16A-4B50-4CF0-B857-3BAC06CDD54E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D6A495D-F9BB-41B9-A912-670D837EA278" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45F5E6B4-88DD-4426-9FB6-D9009F6B8740" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB1EB857-D417-49EB-89FD-04733C872EE9" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B9D09D6-3EFD-45A6-88C3-199BF3EF9A42" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4551D5ED-6C72-4C9B-A556-491042A6113A" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01859947-09D4-417E-92A4-FA4F1625C60D" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "797B7A3B-BAEA-4868-BC3E-CE629FE151F9" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30337B76-E552-431F-B49C-A418E5B851A5" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53027413-3353-4051-88FA-A46859AD747A" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "970D5900-7F83-4140-A3E4-FF4E710DBD2E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA0D4F76-258B-4E5D-AA4D-8231E846C76F" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2A669CC-C10F-4E74-ACD0-DF933D723EB4" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDDAFCF3-811C-4365-8BBA-E0BB4F67AD2A" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13E8E7E7-E29A-4539-8D8C-45B9C39B0146" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A966F2C4-47A0-445F-8927-0F0222A48FB2" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7681419E-5125-40D6-BE61-57CE9C8F3DB3" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CE0D056-B84F-4331-832C-5D1703A15A57" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96A13543-D7E2-41D6-8E8E-BE150ECDAA75" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27310591-C883-4929-824A-AE99E7592D3D" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2964A047-0277-4DA4-BDBE-3F5FC3C1F68E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30CD371C-7B08-4A4B-AEB7-AC6BD199EE15" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DBFE202-86D7-4AE3-AC5B-0902B5FEF18A" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FBB0CE5-C6E7-469D-B3E4-1AB7FF677DFF" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.90_rc3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2B28501-9959-41D4-AA04-70706792611E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E891471A-A0B8-4251-A6D3-60E947A18F70" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0E6A5E0-66E0-4EA7-9007-2389179500C8" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED827D10-C862-4BC7-AB33-06E040DAE161" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51DC9827-D7D1-4D34-AA35-6A7BDB92907D" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.91_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5511BAA8-2BA1-45C2-A4FB-6B8285CE62DE" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.91_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A756F525-1527-49FB-B045-9709FA957836" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37A3B776-0096-41B7-8D2E-C6F0B4F37458" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5AAC04C-FFC7-45D8-A29C-6B258CD56489" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A06278C4-328D-4D14-9BC1-DCA697EC9EDD" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A66094D-050A-405E-AB0F-239A39F64E43" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF14BCBC-8B3C-4F70-93E8-ADB5C992ACE5" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B931BDB2-DBE4-4983-ABFB-86941CDD14F2" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8FA4A86-C015-4F1F-B565-89410E70D053" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F874453A-7F9C-4FF2-ACBD-F691FBF3B4DB" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0722860E-934A-49CA-BEAD-0EB05AA6E4C6" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96F399F4-E7C0-4AD0-AA4F-C7C7FC2C466E" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1F0BB8C6-F0A3-418F-A457-93A4CC5BB6C6" }, { "criteria": "cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19A73FE2-2D4C-4B47-85C9-F8E3874992B6" } ], "operator": "OR" } ] } ]