PublicDate: 2008-04-16 15:05:00 UTC Candidate: CVE-2008-0314 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0314 Description: Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_clamav: upstream_clamav: released (0.93) dapper_clamav: released (0.94.dfsg.2-1ubuntu0.3~dapper2) feisty_clamav: needed (reached end-of-life) gutsy_clamav: needed (reached end-of-life) hardy_clamav: released (0.94.dfsg.2-1ubuntu0.3~hardy4) intrepid_clamav: not-affected (0.94.dfsg.1~rc1-0ubuntu1) jaunty_clamav: not-affected (0.94.dfsg.1~rc1-0ubuntu1) devel_clamav: not-affected (0.94.dfsg.1~rc1-0ubuntu1)