CVE-2004-1909

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR archives, such as those generated by the Beagle/Bagle worm.

Affected products

Clam Anti-Virus Clamav: 0.65, 0.67

References

http://freshmeat.net/projects/clamav/?branch_id=29355&release_id=154462
http://secunia.com/advisories/11177
http://security.gentoo.org/glsa/glsa-200404-07.xml
http://www.securityfocus.com/bid/9897
https://exchange.xforce.ibmcloud.com/vulnerabilities/15553
http://freshmeat.net/projects/clamav/?branch_id=29355&release_id=154462
http://secunia.com/advisories/11177
http://security.gentoo.org/glsa/glsa-200404-07.xml
http://www.securityfocus.com/bid/9897
https://exchange.xforce.ibmcloud.com/vulnerabilities/15553

Get alerted when CVE-2004-1909 or the next vulnerability affects your stack