CVE-2010-0098 Security feature bypass in n/a

Critical 10.0 Published 8 Apr 2010 Updated 7 Aug 2024

Remote attackers can bypass virus detection in ClamAV by submitting crafted CAB or 7z archives that standard utilities accept but the scanner misses.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2010-0098?

CVE-2010-0098 is a critical vulnerability in Clamav Clamav, published on 8 Apr 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities.

Which versions are affected by CVE-2010-0098?

It affects 2 products.

Products include Clamav Clamav, Clamavs Clamav.

How do I fix CVE-2010-0098?

Upgrade to a fixed version.

Is CVE-2010-0098 being exploited?

There is no known exploitation of CVE-2010-0098 in the wild and no public exploit code.

All Clamav Clamav vulnerabilities

Sources

Also known as DEBIAN-CVE-2010-0098, GHSA-xjfx-xwf6-5c7w.