CVE-2008-1837: Clam Anti-Virus Clamav

Medium severity, CVSS 5.0. EPSS: 4.8% chance of exploitation in the next 30 days.

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected products

• Clam Anti-Virus Clamav: up to and including 0.92.1; version 0.15 only; version 0.20 only; version 0.21 only; version 0.22 only; version 0.23 only; …

Published 2008-04-16. Last modified 2026-06-16.