CVE-2009-1372
EPSS 6.7%
Description
Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL.
How to fix CVE-2009-1372
To remediate CVE-2009-1372, upgrade the affected package to a fixed version below.
- Debian/clamav—upgrade to 0.95.1+dfsg-1 or later
Is CVE-2009-1372 being exploited?
Moderate — EPSS is 6.7%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 0.95.1+dfsg-1