NetSight
IP …
medium5.0

CVE-2013-2020

Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset l…

Impact

Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 10.04, 11.10, 12.04, 12.10, 13.04
SuseLinux Enterprise Server
Version 11.0
ClamavClamav
through 0.97.7
Versions 0.9, 0.90, 0.90.1, 0.90.1_p0, 0.90.2

Weakness classification

CWE-189

References