CVE-2007-6335

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.

Affected products

Clamav

Clam Anti-virus Clamav

≤ 0.92

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

18.4% (97th percentile)

Weakness

CWE-189

NVD status

Modified

Published

2007-12-20