CVE-2008-0318

Published: 12 February 2008

Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.

Priority

Status

Package	Release	Status
clamav Launchpad, Ubuntu, Debian	dapper	Released (0.92~dfsg-2~dapper1ubuntu0.1)
	edgy	Ignored (end of life, was needed)
	feisty	Released (0.90.2-0ubuntu1.6)
	gutsy	Released (0.91.2-3ubuntu2.3)
	upstream	Released (0.92.1)

References

https://www.cve.org/CVERecord?id=CVE-2008-0318
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/191150

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›