CVE-2004-1909: Clam Anti-Virus Clamav

Low severity, CVSS 2.6. EPSS: 1.4% chance of exploitation in the next 30 days.

Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR archives, such as those generated by the Beagle/Bagle worm.

Affected products

• Clam Anti-Virus Clamav: version 0.65 only; version 0.67 only

Published 2004-12-31. Last modified 2026-06-16.