CVE-2008-2713: Clam Anti-Virus Clamav

Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days.

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.

Affected products

• Clam Anti-Virus Clamav: version 0.15 only; version 0.20 only; version 0.21 only; version 0.22 only; version 0.23 only; version 0.24 only; …

Published 2008-06-16. Last modified 2026-06-16.