| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | = 0.51= 0.52= 0.53= 0.54= 0.60= 0.65= 0.67= 0.68= 0.68.1= 0.70= 0.75.1= 0.80= 0.80_rc1= 0.80_rc2= 0.80_rc3= 0.80_rc4= 0.81= 0.82= 0.83= 0.84= 0.84_rc1= 0.84_rc2= 0.85= 0.85.1= 0.86= 0.86.1= 0.86.2= 0.87= 0.87.1= 0.88 |
Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free