CVE-2008-1387
EPSS 5.7%
Description
ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
How to fix CVE-2008-1387
To remediate CVE-2008-1387, upgrade the affected package to a fixed version below.
- Debian/clamav—upgrade to 0.92.1~dfsg2-1 or later
Is CVE-2008-1387 being exploited?
Moderate — EPSS is 5.7%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 0.92.1~dfsg2-1