CVE-2008-1100

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0330%

EPSS Percentile0.36th

Published2008年4月14日

Last Modified2026年4月23日

Vulnerability Description

Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file.

Affected Platforms (CPE)

📦

Clam Anti Virus

Clamav

= 0.92

📦

Clam Anti Virus

Clamav

= 0.92.1

References & Advisories

🔗 http://kolab.org/security/kolab-vendor-notice-20.txt

🔗 http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html

🔗 http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html

🔗 http://secunia.com/advisories/29000

🔗 http://secunia.com/advisories/29863

🔗 http://secunia.com/advisories/29886

🔗 http://secunia.com/advisories/29891

Vulnerability Description

Affected Platforms (CPE)

Clamav

Clamav

References & Advisories

相關漏洞威脅