CVE-2008-5314: Clam Anti-Virus Clamav

Medium severity, CVSS 4.3. EPSS: 8.2% chance of exploitation in the next 30 days.

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.

Affected products

• Clam Anti-Virus Clamav: up to and including 0.94.1; version 0.70 only; version 0.71 only; version 0.72 only; version 0.73 only; version 0.74 only; …

Published 2008-12-03. Last modified 2026-06-16.