CVE-2009-3736: clamav (exact versions not specified); +23 more affected products

CVE-2009-3736 affects clamav. EPSS 0.00398 (percentile 0.32816), scored 22-Oct-2026. Fixed version: 0.95+dfsg-1. Fixed version: 0.95+dfsg-1. Fixed version: 0.95+dfsg-1. Fixed version: 4.8.2-1. Fixed version: 4.8.2-1. Fixed version: 2.1.9~20091212-1. Fixed version: 1.3.5-6. Fixed version: 1.3.5-6. Fixed version: 1.3.5-6. Fixed version: 2.26.3-14. Fixed version: 2.26.3-14. Fixed version: 2.26.3-14. Fixed version: 1.2.10-1. Fixed version: 1.2.10-1. Fixed version: 1.2.10-1. Fixed version: 2.1.4-7. Fixed version: 2.1.4-7. Fixed version: 2.1.4-7. Fixed version: 3.06-1.2. Fixed version: 3.06-1.2.

Affected technology

clamav · Exact affected versions not specified by the source
Vendor not specified by the source

collectd · Exact affected versions not specified by the source
Vendor not specified by the source

ggobi · Exact affected versions not specified by the source
Vendor not specified by the source

graphicsmagick · Exact affected versions not specified by the source
Vendor not specified by the source

graphviz · Exact affected versions not specified by the source
Vendor not specified by the source

hamlib · Exact affected versions not specified by the source
Vendor not specified by the source

heartbeat · Exact affected versions not specified by the source
Vendor not specified by the source

hercules · Exact affected versions not specified by the source
Vendor not specified by the source

hypre · Exact affected versions not specified by the source
Vendor not specified by the source

imagemagick · Exact affected versions not specified by the source
Vendor not specified by the source

jags · Exact affected versions not specified by the source
Vendor not specified by the source

lam · Exact affected versions not specified by the source
Vendor not specified by the source

libextractor · Exact affected versions not specified by the source
Vendor not specified by the source

libprelude · Exact affected versions not specified by the source
Vendor not specified by the source

libtool · Exact affected versions not specified by the source
Vendor not specified by the source

mp4h · Exact affected versions not specified by the source
Vendor not specified by the source

openmpi · Exact affected versions not specified by the source
Vendor not specified by the source

parser · Exact affected versions not specified by the source
Vendor not specified by the source

parser-mysql · Exact affected versions not specified by the source
Vendor not specified by the source

pinball · Exact affected versions not specified by the source
Vendor not specified by the source

redland · Exact affected versions not specified by the source
Vendor not specified by the source

sdcc · Exact affected versions not specified by the source
Vendor not specified by the source

synfig · Exact affected versions not specified by the source
Vendor not specified by the source

xmlsec1 · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 23-Oct-2026 16:11 UTC

Product: clamav
CCR priority: 0.1 /100 (P5)
EPSS: 0.00398 · percentile 0.32816 · 2026-10-22
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-23 07:49:27.727257+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2009-3736.html