Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clamav | Clam_anti-virus | * | 0.88.4 (including) |
| Clamav | Clam_anti-virus | . (including) | . (including) |
| Clamav | Clam_anti-virus | 0.15 (including) | 0.15 (including) |
| Clamav | Clam_anti-virus | 0.20 (including) | 0.20 (including) |
| Clamav | Clam_anti-virus | 0.21 (including) | 0.21 (including) |
| Clamav | Clam_anti-virus | 0.22 (including) | 0.22 (including) |
| Clamav | Clam_anti-virus | 0.23 (including) | 0.23 (including) |
| Clamav | Clam_anti-virus | 0.24 (including) | 0.24 (including) |
| Clamav | Clam_anti-virus | 0.51 (including) | 0.51 (including) |
| Clamav | Clam_anti-virus | 0.52 (including) | 0.52 (including) |
| Clamav | Clam_anti-virus | 0.53 (including) | 0.53 (including) |
| Clamav | Clam_anti-virus | 0.54 (including) | 0.54 (including) |
| Clamav | Clam_anti-virus | 0.60 (including) | 0.60 (including) |
| Clamav | Clam_anti-virus | 0.60p (including) | 0.60p (including) |
| Clamav | Clam_anti-virus | 0.65 (including) | 0.65 (including) |
| Clamav | Clam_anti-virus | 0.67 (including) | 0.67 (including) |
| Clamav | Clam_anti-virus | 0.68 (including) | 0.68 (including) |
| Clamav | Clam_anti-virus | 0.68.1 (including) | 0.68.1 (including) |
| Clamav | Clam_anti-virus | 0.70 (including) | 0.70 (including) |
| Clamav | Clam_anti-virus | 0.71 (including) | 0.71 (including) |
| Clamav | Clam_anti-virus | 0.72 (including) | 0.72 (including) |
| Clamav | Clam_anti-virus | 0.73 (including) | 0.73 (including) |
| Clamav | Clam_anti-virus | 0.74 (including) | 0.74 (including) |
| Clamav | Clam_anti-virus | 0.75 (including) | 0.75 (including) |
| Clamav | Clam_anti-virus | 0.75.1 (including) | 0.75.1 (including) |
| Clamav | Clam_anti-virus | 0.80 (including) | 0.80 (including) |
| Clamav | Clam_anti-virus | 0.80_rc1 (including) | 0.80_rc1 (including) |
| Clamav | Clam_anti-virus | 0.80_rc2 (including) | 0.80_rc2 (including) |
| Clamav | Clam_anti-virus | 0.80_rc3 (including) | 0.80_rc3 (including) |
| Clamav | Clam_anti-virus | 0.80_rc4 (including) | 0.80_rc4 (including) |
| Clamav | Clam_anti-virus | 0.81 (including) | 0.81 (including) |
| Clamav | Clam_anti-virus | 0.81_rc1 (including) | 0.81_rc1 (including) |
| Clamav | Clam_anti-virus | 0.82 (including) | 0.82 (including) |
| Clamav | Clam_anti-virus | 0.83 (including) | 0.83 (including) |
| Clamav | Clam_anti-virus | 0.84 (including) | 0.84 (including) |
| Clamav | Clam_anti-virus | 0.84_rc1 (including) | 0.84_rc1 (including) |
| Clamav | Clam_anti-virus | 0.84_rc2 (including) | 0.84_rc2 (including) |
| Clamav | Clam_anti-virus | 0.85 (including) | 0.85 (including) |
| Clamav | Clam_anti-virus | 0.85.1 (including) | 0.85.1 (including) |
| Clamav | Clam_anti-virus | 0.86 (including) | 0.86 (including) |
| Clamav | Clam_anti-virus | 0.86.1 (including) | 0.86.1 (including) |
| Clamav | Clam_anti-virus | 0.86.2 (including) | 0.86.2 (including) |
| Clamav | Clam_anti-virus | 0.86_rc1 (including) | 0.86_rc1 (including) |
| Clamav | Clam_anti-virus | 0.87 (including) | 0.87 (including) |
| Clamav | Clam_anti-virus | 0.87.1 (including) | 0.87.1 (including) |
| Clamav | Clam_anti-virus | 0.88 (including) | 0.88 (including) |
| Clamav | Clam_anti-virus | 0.88.1 (including) | 0.88.1 (including) |
| Clamav | Clam_anti-virus | 0.88.3 (including) | 0.88.3 (including) |
| Clamav | Ubuntu | dapper | * |
| Clamav | Ubuntu | devel | * |
| Clamav | Ubuntu | edgy | * |
| Clamav | Ubuntu | feisty | * |