CVE-2008-0318 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Anti-virus Clamav
Severity
10.0CRITICALNVD
EPSS
15.6%
top 5.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 12
Latest updateMay 1
Description
Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.
CVSS vector
AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0
Affected Packages2 packages
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-4q4c-x269-7rpf: Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0↗2022-05-01
OSV▶
CVE-2008-0318: Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0↗2008-02-12
CVEList▶
CVE-2008-0318: Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0↗2008-02-12