cbcvebase.
CVE-2008-1833
published 2008-04-16

CVE-2008-1833: Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.

PriorityP346high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
8.60%
94.4th percentile
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.

Affected

6 ranges
VendorProductVersion rangeFixed in
clam_anti-virusclamav——
clamavclamav>= 0 < 0.92.1~dfsg2-1.10.92.1~dfsg2-1.1
clamavclamav>= 0 < 0.92.1~dfsg2-1.10.92.1~dfsg2-1.1
clamavclamav>= 0 < 0.92.1~dfsg2-1.10.92.1~dfsg2-1.1
clamavclamav>= 0 < 0.92.1~dfsg2-1.10.92.1~dfsg2-1.1
debianclamav< clamav 0.92.1~dfsg2-1.1 (bookworm)clamav 0.92.1~dfsg2-1.1 (bookworm)

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5MEDIUM
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.