PT-2013-3505 · Cisco+1 · Clamav+1
Felix Groebert
·
Publicado
2013-05-13
·
Atualizado
2015-09-28
·
CVE-2013-2020
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
ClamAV versions prior to 0.97.8
Description
The issue is related to an integer underflow in the
cli scanpe function, which can be triggered by a skewed offset larger than the size of the PE section in a UPX packed executable. This can cause a denial of service, resulting in a crash due to an out-of-bounds read.Recommendations
For versions prior to 0.97.8, update to version 0.97.8 or later to resolve the issue. As a temporary workaround, consider restricting the scanning of UPX packed executables until the update is applied.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Clamav
Suse