Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Clam Anti-Virus PE文件头处理堆溢出漏洞
Vulnerability Description
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 Clam AV在处理畸形PE文件时存在堆溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令 。 在处理某些PE格式文件时，两个变量可能会被恶意地设置为非常大的值，导致整数溢出。这可能导致分配比预期少的内存，之后的代码可能会覆盖堆缓冲区。
CVSS Information
N/A
Vulnerability Type
N/A