CVE-2008-5314: Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to c...

Security readout for executives and security teams

This flaw can crash ClamAV when it scans a specially crafted JPEG file. The business impact is availability: mail, upload, or file-scanning services relying on vulnerable ClamAV versions may stop processing content until restarted. The bundle does not provide CVSS severity or evidence of active exploitation. Exposure is most likely where ClamAV before 0.94.2 scans untrusted JPEGs, including email gateways, web upload scanners, file-sharing systems, and automated malware scanning pipelines. Packaged ClamAV versions in operating systems should be checked against vendor advisories. Treat this as a moderate availability issue for legacy environments. Prioritize remediation if ClamAV is in a mail gateway, upload path, or automated scanning service. Modern, patched deployments should mainly confirm inventory and vendor package status. Mitigation focus: Upgrade ClamAV to 0.94.2 or later where applicable.; Apply fixed OS vendor packages from Ubuntu, Debian, Gentoo, Mandriva, or Apple guidance.; Check vendor advisories for backported fixes if version strings differ..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.