| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | = 0.9= 0.90= 0.90.1= 0.90.1_p0= 0.90.2= 0.90.2_p0= 0.90.3= 0.90.3_p0= 0.90.3_p1= 0.91= 0.91.1= 0.91.2= 0.91.2_p0= 0.92= 0.92.1= 0.92_p0= 0.93= 0.93.1= 0.93.2= 0.93.3= 0.94= 0.94.1= 0.94.2= 0.95= 0.95.1= 0.95.2= 0.95.3= 0.96= 0.96.1= 0.96.2= 0.96.3= 0.96.4= 0.96.5= 0.97= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5≤ 0.97.7 |
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free