Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClamAV libclamav/pe.c文件 溢出及整数溢出漏洞
Vulnerability Description
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV的libclamav/pe.c文件中的cli_scanpe()函数在处理特制的PE文件时存在整数溢出漏洞，最终可能导致堆溢出；libclamav/mew.c文件中的unmew11()函数也存在堆溢出。 如果用户受骗打开了恶意文件的话，就可能触发这些溢出，导致以进程权限执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A