CVE-2008-0318

2008-02-1200:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.421

Percentile

97.4%

JSON

Integer overflow in the cli_scanpe function in libclamav in ClamAV before
0.92.1, as used in clamd, allows remote attackers to cause a denial of
service and possibly execute arbitrary code via a crafted Petite packed PE
file, which triggers a heap-based buffer overflow.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/191150>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchclamav< 0.92~dfsg-2~dapper1ubuntu0.1UNKNOWN
ubuntu7.04noarchclamav< 0.90.2-0ubuntu1.6UNKNOWN
ubuntu7.10noarchclamav< 0.91.2-3ubuntu2.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	clamav	< 0.92~dfsg-2~dapper1ubuntu0.1	UNKNOWN
ubuntu	7.04	noarch	clamav	< 0.90.2-0ubuntu1.6	UNKNOWN
ubuntu	7.10	noarch	clamav	< 0.91.2-3ubuntu2.3	UNKNOWN