CVE-2009-1270

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.

• CWE-835

• http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlMailing List, Third Party Advisory
• http://osvdb.org/53461Broken Link
• http://secunia.com/advisories/34716Third Party Advisory
• http://secunia.com/advisories/36701Third Party Advisory
• http://support.apple.com/kb/HT3865Third Party Advisory
• http://www.debian.org/security/2009/dsa-1771Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:097Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/04/07/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/34357Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-754-1Third Party Advisory
• http://www.vupen.com/english/advisories/2009/0934Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49846Third Party Advisory, VDB Entry
• https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462Broken Link, Issue Tracking
• http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlMailing List, Third Party Advisory
• http://osvdb.org/53461Broken Link
• http://secunia.com/advisories/34716Third Party Advisory
• http://secunia.com/advisories/36701Third Party Advisory
• http://support.apple.com/kb/HT3865Third Party Advisory
• http://www.debian.org/security/2009/dsa-1771Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:097Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/04/07/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/34357Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-754-1Third Party Advisory
• http://www.vupen.com/english/advisories/2009/0934Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49846Third Party Advisory, VDB Entry
• https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1462Broken Link, Issue Tracking

Published

Apr 8, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1264Frontend User Registration (sr_feuser_register) extension 2.…
• CVE-2009-1265Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the …
• CVE-2009-1266Unspecified vulnerability in Wireshark before 1.0.7 has unkn…
• CVE-2009-1267Unspecified vulnerability in the LDAP dissector in Wireshark…
• CVE-2009-1268The Check Point High-Availability Protocol (CPHAP) dissector…
• CVE-2009-1269Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 …
• CVE-2009-1271The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2…
• CVE-2009-1272The php_zip_make_relative_path function in php_zip.c in PHP …
• CVE-2009-1273pam_ssh 1.92 and possibly other versions, as used when PAM i…
• CVE-2009-1274Integer overflow in the qt_error parse_trak_atom function in…
• CVE-2009-1275Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and …
• CVE-2009-1276XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_10…