CVE-2008-1835: Clam Anti-Virus Clamav

Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days.

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.

Affected products

• Clam Anti-Virus Clamav: up to and including 0.92.1; version 0.15 only; version 0.20 only; version 0.21 only; version 0.22 only; version 0.23 only; …

Published 2008-04-16. Last modified 2026-06-16.