CVE-2008-0318 Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a craft...
HighCVSS 10.0
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clam anti-virus clamav | <= 0.92 | No fix listed |
| debian/clamav(Debian:12) | < 0.92.1~dfsg-1 | 0.92.1~dfsg-1 |
| debian/clamav(Debian:13) | < 0.92.1~dfsg-1 | 0.92.1~dfsg-1 |
| debian/clamav(Debian:14) | < 0.92.1~dfsg-1 | 0.92.1~dfsg-1 |
References
- bugs.gentoo.org
- docs.info.apple.com
- kolab.org
- 20080212 ClamAV libclamav PE File Integer Overflow Vulnerability third-party-advisory
- APPLE-SA-2008-03-18 vendor-advisory
- SUSE-SR:2008:004 vendor-advisory
- 28907 third-party-advisory vendor-advisory
- 28913 third-party-advisory vendor-advisory
- 28949 third-party-advisory vendor-advisory
- 29001 third-party-advisory vendor-advisory
- 29026 third-party-advisory vendor-advisory
- 29048 third-party-advisory vendor-advisory
- 29060 third-party-advisory vendor-advisory
- 29420 third-party-advisory vendor-advisory
- GLSA-200802-09 vendor-advisory
- 1019394 vdb-entry
- sourceforge.net patch
- support.novell.com
- DSA-1497 vendor-advisory
- MDVSA-2008:088 vendor-advisory
- 27751 vdb-entry
- ADV-2008-0503 vdb-entry vendor-advisory
- ADV-2008-0606 vdb-entry vendor-advisory
- ADV-2008-0924 vdb-entry vendor-advisory
- FEDORA-2008-1608 vendor-advisory
- FEDORA-2008-1625 vendor-advisory
- Debian Security Tracker CVE-2008-0318 vendor-advisory