Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade clamav | Aug 30, 2017 | May 13, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Aug 28, 2015 | May 13, 2013 |
| Apple Osx Clamav | — | Apply OS X security update 2013-004 | Sep 17, 2013 | May 13, 2013 |
| Debian | — | Upgrade clamav | Jul 30, 2024 | May 13, 2013 |
| Gentoo Linux | — | Upgrade app-antivirus/clamav. | Oct 30, 2017 | May 13, 2013 |
| Suse | — | Upgrade clamav-dbUpgrade clamav-debugsourceUpgrade clamav-debuginfoUpgrade clamav | Dec 12, 2013 | May 13, 2013 |
| Ubuntu | — | Upgrade clamav | Nov 8, 2024 | May 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub