Vulnerability CVE-2008-5050 - CERT Civis.Net

Vulnerability Name:

CVE-2008-5050 (CCN-46462)

Assigned:

2008-11-09

Published:

2008-11-09

Updated:

2018-10-11

Summary:

Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: Full-Disclosure Mailing List, Sun Nov 09 2008 - 09:46:43 CST
ClamAV get_unicode_name() off-by-one buffer overflow

Source: MITRE
Type: CNA
CVE-2008-5050

Source: CCN
Type: Kolab Security Issue 23 20081202
Kolab Server, ClamAV

Source: APPLE
Type: UNKNOWN
APPLE-SA-2009-02-12

Source: FULLDISC
Type: Exploit
20081109 ClamAV get_unicode_name() off-by-one buffer overflow

Source: SUSE
Type: UNKNOWN
SUSE-SR:2008:026

Source: CCN
Type: SA32663
ClamAV "get_unicode_name()" Off-By-One Vulnerability

Source: SECUNIA
Type: Vendor Advisory
32663

Source: SECUNIA
Type: UNKNOWN
32699

Source: SECUNIA
Type: UNKNOWN
32765

Source: CCN
Type: SA32872
SUSE Update for Multiple Packages

Source: SECUNIA
Type: UNKNOWN
32872

Source: CCN
Type: SA32917
Kolab Server ClamAV Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
33016

Source: SECUNIA
Type: UNKNOWN
33317

Source: CCN
Type: SA33937
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
33937

Source: GENTOO
Type: UNKNOWN
GLSA-200812-21

Source: SREASON
Type: UNKNOWN
4579

Source: CCN
Type: SECTRACK ID: 1021159
Clam AntiVirus Buffer Overflow in get_unicode_name() Lets Remote Users Execute Arbitrary Code

Source: CCN
Type: SourceForge.net: Files
Clam AntiVirus, File Release Notes and Changelog, Release Name: 0.94.1

Source: CONFIRM
Type: UNKNOWN
http://sourceforge.net/project/shownotes.php?release_id=637952&group_id=86638

Source: CCN
Type: Apple Web site
About the security content of Security Update 2009-001

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT3438

Source: CCN
Type: Clam AntiVirus Web site
Clam AntiVirus

Source: DEBIAN
Type: UNKNOWN
DSA-1680

Source: DEBIAN
Type: DSA-1680
clamav -- buffer overflow

Source: CCN
Type: GLSA-200812-21
ClamAV: Multiple vulnerabilities

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2008:229

Source: CCN
Type: OSVDB ID: 49832
ClamAV libclamav/vba_extract.c get_unicode_name() Function Off-by-one Overflow

Source: BUGTRAQ
Type: UNKNOWN
20081108 ClamAV get_unicode_name() off-by-one buffer overflow

Source: BID
Type: Patch
32207

Source: CCN
Type: BID-32207
ClamAV 'get_unicode_name()' Off-By-One Heap Based Buffer Overflow Vulnerability

Source: SECTRACK
Type: UNKNOWN
1021159

Source: CCN
Type: USN-672-1
ClamAV vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-672-1

Source: VUPEN
Type: UNKNOWN
ADV-2008-3085

Source: VUPEN
Type: UNKNOWN
ADV-2009-0422

Source: XF
Type: UNKNOWN
clamav-getunicodename-bo(46462)

Source: XF
Type: UNKNOWN
clamav-getunicodename-bo(46462)

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-9644

Source: FEDORA
Type: UNKNOWN
FEDORA-2008-9651

Source: SUSE
Type: SUSE-SR:2008:026
SUSE Security Summary Report

Vulnerable Configuration:

Configuration 1:

cpe:/a:clam_anti-virus:clamav:0.01:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.02:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.03:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.04:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.05:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.06:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.10:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.11:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.12:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.13:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.14:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.14:pre:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.60p:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc2:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc3:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80:rc4:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.81:rc1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.81_rc1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84:rc1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84:rc2:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86:rc1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.86_rc1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.3:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.4:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.5:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.6:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.7:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.7:p0:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.88.7:p1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.1:p0:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.2:p0:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.3:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.3:p0:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90.3:p1:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.90rc1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91.2:p0:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91rc1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.91rc2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.92:p0:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.92.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.93:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.93.1:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.93.2:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:0.93.3:*:*:*:*:*:*:*

OR cpe:/a:clam_anti-virus:clamav:*:*:*:*:*:*:*:* (Version <= 0.94)

Configuration CCN 1:

cpe:/a:clamav:clamav:0.65:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.83:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.87:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.84:rc2:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91.2:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.92:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.92.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90:rc1.1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90:rc2:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90:rc3:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.15:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.20:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.21:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.22:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.23:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.24:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.51:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.52:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.53:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.54:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.60:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.60p:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.67:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.68:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.68.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.70:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.71:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.72:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.73:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.74:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.75:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.75.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc2:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc3:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc4:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.81:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.81:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.82:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.84:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.84:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.85:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.85.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.86:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.86.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.86.2:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.87.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.3:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.4:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.5:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.6:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.7:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.2:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.3:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.93:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.7_p0:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.88.7_p1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.12:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.13:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.14:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.14:pre:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.80:rc:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.93.1:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.93.3:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91:rc2:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.91:rc1:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.93.2:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.02:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.03:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.05:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.01:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.10:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.94:*:*:*:*:*:*:*

OR cpe:/a:clamav:clamav:0.90.2:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

OR cpe:/a:kolab:kolab_server:2.0.1:*:*:*:*:*:*:*

OR cpe:/a:kolab:kolab_server:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:kolab:kolab_server:2.0.4:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*

OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:x86_64:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2008.1:*:*:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.0:*:*:*:*:*:*:*

OR cpe:/o:mandriva:linux:2009.0:-:x86_64:*:*:*:*:*

OR cpe:/a:kolab:kolab_server:2.1:*:*:*:*:*:*:*

OR cpe:/a:kolab:kolab_server:2.2:beta1:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20085050	V	CVE-2008-5050	2017-09-27
oval:org.mitre.oval:def:17960	P	USN-672-1 -- clamav vulnerability	2014-06-30
oval:org.mitre.oval:def:8113	P	DSA-1680 clamav -- buffer overflow, stack consumption	2014-06-23
oval:org.mitre.oval:def:18536	P	DSA-1680-1 clamav - potential code execution	2014-06-23
oval:org.debian:def:1680	V	buffer overflow, stack consumption	2008-12-04