Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClamAV 整数溢出漏洞
Vulnerability Description
Clam AntiVirus（ClamAV）是ClamAV团队开发的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。 ClamAV 0.97.8之前的版本中的pe.c中的‘cli_scanpe’函数中存在整数溢出漏洞。远程攻击者可通过过渡偏离的偏移值大于UPX压缩包可执行文件中的PE部分大小，造成越边界读取利用该漏洞造成拒绝服务（崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A