CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value.

Affected products

Clamav

Clam Anti-virus Clamav

= 0.92.1

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

9.0% (95th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2008-04-16