CVE-2008-1387: Clam Anti-Virus Clamav

Medium severity, CVSS 4.3. EPSS: 4.4% chance of exploitation in the next 30 days.

ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected products

• Clam Anti-Virus Clamav: version 0.90 only; version 0.90.1 only; version 0.90_rc1.1 only; version 0.90_rc2 only; version 0.90_rc3 only; version 0.90rc1 only; …

Published 2008-04-16. Last modified 2026-06-16.